Incident

Lexington Medical Center reports data breach through compromised email account


Learn More

The Lexington Medical Center, a prominent healthcare network headquartered in Columbia, South Carolina, reported a data breach after it was discovered that an unauthorized individual had gained access to an employee's email account.

The unauthorized access was initially detected on October 4, 2023, prompting immediate containment efforts and an investigation by the medical center. By January 18, 2024, it was confirmed that the breach had indeed resulted in the exposure of certain patient information available through the compromised email account.

The incident exposed sensitive consumer information, including

  • names,
  • Social Security numbers,
  • dates of birth,
  • medical record numbers,
  • health insurance identification numbers,
  • patient charge descriptor information,
  • billing codes.

No details are disclosed about the number of affected individuals.

Data breach notification letters were subsequently dispatched on February 14th, 2024, to all individuals whose information was compromised, providing them with specifics regarding the exposed data.

Lexington Medical Center reports data breach through compromised email account