Email Accounts Compromised at UConn Health and Maryville Inc.
Email accounts containing patients’ protected health information have been compromised at University of Connecticut Health Center Finance Corporation and Maryville Inc.
University of Connecticut Health Center Finance Corporation
University of Connecticut Health Center Finance Corporation (UConn Health) has confirmed that there has been unauthorized access to a UConn Health email account that contained patients’ protected health information. Suspicious activity was detected in the account on June 14, 2024. The account was immediately secured to prevent further unauthorized access, and a digital forensics company was engaged to assist with the investigation.
The investigation confirmed on August 7, 2024, that a single email account had been compromised that contained patient information such as names, dates of birth, Social Security numbers, driver’s license numbers, financial account numbers, medical treatment/diagnosis information, prescriptions, and/or health insurance information. Notification letters started to be mailed to the affected individuals on August 13, 2024. Complimentary credit monitoring services have been offered to individuals who had their Social Security numbers exposed. The breach was reported to the HHS’ Office for Civil Rights as affecting 500 affected individuals.
Maryville Inc., New York
Maryville Inc., a New York provider of addiction treatment services, has recently reported an email incident to the HHS Office for Civil Rights. Since the investigation into the incident is ongoing, the breach has been reported as affecting 500 individuals. The total will be updated when the investigation and document review have been completed.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
According to Maryville’s substitute breach notice, suspicious activity was identified in its email environment on or around May 6, 2024. The forensic investigation confirmed that the breach was limited to a single corporate email account. At this stage, while it has been confirmed that protected health information was exposed or compromised, the exact types of data involved have not yet been determined. Individual notifications will be mailed when the review has been completed. This is the second email incident to be reported by Maryville so far this year. The previous incident was announced in February and affected 15,503 patients, although the incident occurred in August 2023.
