Tennesee Hospital Notifies 24,000 of EMR Breach
Decatur County General Hospital notified 24,000 patients of the Parsons, Tennessee hospital in January that unauthorized software was installed on the system of their electronic medical records (EMR) vendor.
Access to the server is believed to have happened through the server housing in order to install the software rather than an online attack. The software was installed in September and it was taken offline by the vendor a few days later.
The server contained various patient information including names, addresses, birth dates, Social Security numbers, diagnosis, treatment information and insurance billing. The hospital is offering one year of access to online credit monitoring service myTrueIdentity.