Mercy Health has been notified by a third-party vendor of a breach in the vendor’s security. Ciox Health, a health care information management company, reported an incident involving unauthorized access to an employee’s email account that may have involved some of Mercy Health patients’ information.
Ciox determined that patient information potentially exposed may have included clinical or treatment and demographic information. Ciox’s investigation determined that an unauthorized person accessed its employee’s email account between June 24 - July 2, 2021. Ciox has no indication that any of the patients’ information was actually viewed or acquired by the unauthorized person, or that it has been misused.
With the assistance of Mercy Health, Ciox has mailed notification letters to patients whose information was found in the account. Mercy Health patients concerned about this incident may direct their calls to 855-618-3107, between 9 AM and 6:30 PM Eastern Times, Monday through Friday.
Additional information may be found at: https://www.cioxhealth.com/notice-of-email-security-incident/.