An unauthorized person may have gained access to BJC Healthcare patients' information

May 5--ST. LOUIS -- HealthCare is investigating after an unauthorized person hacked into employees' emails and may have gained access to patient names, medical records, health insurance information and Social Security numbers.

On March 6, BJC identified "suspicious activity" within three employee email accounts, it said in a Tuesday news release. The organization secured the email accounts, and a computer forensic firm was hired to assist with the investigation. The investigation determined that an unauthorized person gained access to the employee email accounts for a limited time.

Though the investigation was unable to determine whether the unauthorized person viewed any emails or attachments, some emails or attachments in the accounts contained patient information.

BJC said it believes that the email accounts may contain information about a limited number of patients seen at 19 of its facilities, including Memorial Hospital Belleville, Memorial Hospital East in Shiloh, and Alton Memorial.

In some instances, the release stated, patients' health insurance information and Social Security numbers have also been in the email accounts.

That information also may have included: some patients' names, dates of birth, medical records or patient account numbers and limited treatment or clinical information, such as provider names, visit dates, medications, diagnoses and testing information.

Once the review of the accounts is complete, BJC said it will mail letters to patients whose information was identified in the employee email accounts.

BJC has also established a dedicated, toll-free call center to answer questions about the incident. Patients with questions can call 866-423-7547, Monday through Friday, from 8 a.m. to 6 p.m.

According to the release, BJC has no evidence that patient information has been misused as a result of the breach. For patients whose Social Security numbers or driver's license numbers were identified in the email accounts, BJC will offer complimentary credit monitoring and identity protection services, according to the release.

BJC recommends affected patients review statements they receive from their health insurers and health care providers. If there are charges for services not received, individuals should contact the insurer or provider immediately.

___

(c)2020 the Belleville News-Democrat (Belleville, Ill.)

Visit the Belleville News-Democrat (Belleville, Ill.) at www.bnd.com

Distributed by Tribune Content Agency, LLC.