MultiCare Health System: One hacked email account leads to PHI threat for 1,200 individuals

Five-hospital MultiCare Health System, serving the Tacoma, Wash., metropolitan area, is informing and notifying about 1,200 individuals after the email account of one worker was hacked.

The agency learned of the attack in the month of late November. As cyberattacks in the healthcare industry have increased, providers mostly learn that they have been hit when a law enforcement agency investigating one breach discovers other agencies have also been affected.

Protected health information that might have been compromised involves names, dates of birth, addresses, gender, dates of service, account balances, and diagnoses and treatment information.

Financial data and Social Security numbers weren’t accessed, and a media notice from MultiCare didn’t mention either the system would give protective services for affected consumers. The agency said it has no proof that any information has been accessed or misused, but cautioned sufferers to analyze their explanation of benefit statements for irregularities.

MultiCare now is re-educating workers on security precautions involving how to identify “phishing” emails that seem to be legitimate but launch malware when clicked on. The company didn’t respond to a request for additional information.