DETROIT – Henry Ford Health has confirmed that an email phishing scheme led to a data breach affecting 168,000 patients.
Patients were told Monday that someone conducting an email phishing scheme gained access to business email accounts on March 30, 2023. That access was quickly discovered, and the email accounts were secured, according to officials.
Some patient information was contained in the affected emails, but it’s unclear if that information was accessed, according to Henry Ford Health. This discovery was made on May 16. The affected information might have included name, gender, date of birth, age, lab results, procedure type, diagnosis, date of service, telephone number, medical record number and/or internal tracking number.
Henry Ford Health is adding security measures and further training to employees.
Anyone with questions should call the Incident Response Line at 833-627-2685 between 9 a.m. and 9 p.m. Monday-Friday.
Here’s a statement from Henry Ford Health:
We take very seriously our responsibility to protect our patients’ personal information. Unfortunately, we recently experienced a breach into three of our business email accounts. We quickly discovered the unauthorized access, secured the accounts and the threat, and then launched a thorough investigation. We are doing everything that’s required by privacy laws to alert potentially impacted patients, as well as enhancing our already rigorous security measures and providing additional training to our team members.
Henry Ford Health
