MIDDLETOWN–Middlesex Hospital in Middletown says that it suffered a data breach in October.
The hospital says that on October 9, it was discovered that four of the hospital’s employees had been victims of an email phishing scam, which allowed a breach into the hospital’s records.
In all, information for 946 patients may have been compromised. No social security numbers or credit card information was accessed, but the breach did unveil a security weakness that may have released names, addresses, dates of birth, medical record numbers, medications patients take, dates of service and diagnoses.
All patients who may have been impacted were contacted and offered a free year of credit monitoring, and the hospital says it’s taking steps to prevent a similar occurrence in the future.