OCH Regional Medical Center reports data breach exposing patient information
Learn More
OCH Regional Medical Center is reporting a data breach that remained undetected for over a week in September 2023, potentially compromising sensitive information belonging to thousands of patients.
The incident was publicly announced on Friday 18th of April 2025. It involved unauthorized access to the hospital's systems and potentially affected up to 67,000 files containing confidential patient data.
The security incident began on September 6, 2023, when "unauthorized individuals" infiltrated OCH systems and remained undetected until September 14, 2023. After detecting the breach, hospital security terminated the unauthorized access. Subsequent investigation revealed extensive potential data exposure. The compromised information potentially includes:
- Names
- Social Security numbers
- Dates of birth
- Phone numbers
- Addresses
- Medical diagnoses
- Disability codes
- Account numbers
- Insurance details
- Payer information
No details are disclosed about the nature of the attack and the reason for nearly 1.5 years of delay between the incident and the reporting.
OCH Regional Medical Center pans to send notices to individual patients in compliance with U.S. Department of Health and Human Services requirements and weill post online notices for patients they cannot contact directly
