University of Missouri Health Care (“MU Health Care”) is committed to protecting the security and confidentiality of our patients’ information. Regrettably, this notice concerns an incident involving some of that information.
On July 27, 2019, MU Health Care completed the process of identifying patients with information potentially affected by the incident. That information may have included names, dates of birth, medical record numbers, health insurance information, and limited treatment and/or clinical information, such as diagnostic and/or medication information and, for a small number of individuals, a Social Security Number.
MU Health Care launched an investigation to determine the nature and scope of the incident after learning on May 1, 2019, that an unauthorized individual may have gained access to two employees’ email accounts. In addition to commencing an investigation, MU Health Care immediately took steps to secure the employees’ accounts. The investigation determined that the unauthorized access occurred between April 23 and May 1, 2019.
This incident did not affect all MU Health Care patients; but only those patients who had information contained in the affected email account.
We have no indication that individuals’ information was actually viewed by the unauthorized individual, or that it has been misused. However, out of an abundance of caution, MU Health Care began mailing notification letters to those whose information was found in the account and is providing complimentary credit monitoring services to those individuals whose Social Security numbers potentially were exposed. We recommend patients review any statements they receive from their health insurers or health care providers. If you see charges for services you did not receive, you should contact the insurer or provider immediately.
We regret any concern or inconvenience this incident may cause and remain committed to protecting the security and confidentiality of our patients’ information. To help prevent something like this from happening in the future, MU Health Care is reinforcing education with its staff regarding how to identify and avoid suspicious emails and is making additional security enhancements.
We have also established a dedicated toll-free call center to answer questions patients may have about the incident. If you have questions, please call 1-833-762-0222, from 8 a.m. to 5:30 p.m. Central time, Monday through Friday.