East River Medical reports data breach, notifies over 600k patients
Learn More
East River Medical Imaging, based in New York has alerted 605,809 patients about a security breach that occurred in September. The medical practice discovered unusual activities within its IT system on September 20, 2023 and immediately launched a response, engaging a cybersecurity firm for investigation and informed law enforcement.
The probe revealed that from August 31 to September 20, 2023, an intruder had gained access to their network and had potentially accessed or copied certain documents, pertaining to patients and employees. The content of the compromised documents varied for each individual.
For patients, this might include their:
- name,
- contact details,
- health insurance data,
- details of exams or procedures,
- referring doctor,
- imaging results,
- possibly their Social Security number.
Employee data potentially accessed includes:
- names,
- contact details,
- financial account details,
- Social Security
- driver’s license numbers.
No details are disclosed about the nature of the attack.
The number of 605,809 only represents the number of patients impacted, as reported to the Health and Human Services (HHS), and doesn't count the number of affected employees, except for those who were also patients.