A data breach at the University of Connecticut Health Center has potentially compromised information for approximately 326,000 individuals, the facility said in a recent letter to patients.
The Health Center also said in a statement that for 1,500 patients that information includes Social Security numbers.
“UConn Health takes its responsibility to safeguard personal information seriously and apologizes for any inconvenience or concern this incident might cause,” the health center said in the statement. “We have taken and continue to take steps to help prevent something like this from happening again, including evaluating additional platforms for educating staff and reviewing technical controls.”
The school also urged individuals seeking more information to visit health.uconn.edu/securityincident or call 1-877-734-5353 weekdays between 9 a.m. and 9 p.m.
After learning that “an unauthorized third party” gained access to employee email accounts, health center officials notified law enforcement and hired a forensic security firm.
The investigation, which concluded Dec. 24, identified the scope of the breach, which also included access to emails containing names, dates of birth, addresses, and limited medical information of patients. The medical information included billing and appointment data.
The health center is offering free identity theft protection services for patients whose Social Security numbers were compromised.
In a letter to patients, dated Feb. 21, the health center said it wasn’t sure if any of the information contained within the emails was viewed by anyone who gained access to the accounts.
For patients whose Social Security numbers weren’t at risk, the health center included a document on how to obtain a free credit report, place a fraud alert on their credit report, or freeze their credit.