Hoboken Radiology LLC (“Hoboken“) today is providing information about a recent event that may impact the privacy of some personal data related to current and former patients. Like many other medical providers, hospitals, and government agencies, Hoboken has unfortunately been the victim of unauthorized access to its imaging server.
What Happened? On November 3, 2020, Hoboken was informed of potentially suspicious activity involving its medical imaging server. Hoboken began investigating the activity with the assistance of third-party computer forensic specialists to determine if there had been any unauthorized access to its systems.
That investigation is ongoing, but identified unauthorized connections between June 2, 2019 and December 1, 2020. The server on which suspicious activity was identified contained records related to Hoboken’s patients. Therefore, in an abundance of caution, Hoboken is notifying patients that some of their information may have been at risk. The identified server does not contain patient payment card or other financial or insurance information.
What Information Was Involved? The information contained on the server which may have been impacted by this incident included name, gender, date of birth, treatment date, referring physician, patient ID number, accession number, and image and description of image.
Also Read: 5 Ways to Enhance Collaboration Between Cybersecurity and Cloud Teams
The information at risk did not include any individual Social Security numbers, payment card or financial information, or medical insurance information. Hoboken has no evidence any information was subject to actual or attempted misuse.
What Hoboken Is Doing. Hoboken takes this incident and the security of personal information seriously. Upon discovery, Hoboken immediately launched an investigation and took steps to secure its systems and investigate activity. Hoboken worked diligently to investigate and respond to this incident and to identify and notify potentially impacted individuals.
Hoboken is also reviewing and enhancing existing policies, procedures, and processes related to storage of and access to personal information. Hoboken is notifying potentially impacted individuals so that they may take further steps to best protect their information, should they feel it is appropriate to do so. Hoboken is also reporting this incident to relevant state and federal regulators as required.
What You Can Do. While Hoboken has no evidence that any personal information was subject to actual or attempted misuse, it encourages anyone who thinks their information may have been impacted to monitor financial accounts and notify their bank immediately if they detect unauthorized or unusual activity.
For more such updates follow us on Google News ITsecuritywire News. Please subscribe to our Newsletter for more updates
