Portland — Legacy Health is mailing letters to patients whose information might be compromised by a recent phishing incident, according to a Legacy press release.
In late June, Legacy discovered that an unauthorized third party might have gained access to some employee email accounts. That sparked an investigation by Legacy, and a third-party forensic firm, which assisted Legacy.
The investigation revealed that “patient information may have been contained in the affected email accounts, and may have included patients’ names, dates of birth, health insurance information, billing information, medical information regarding care they received at Legacy Health, and in some cases, Social Security numbers and driver’s license information,” the press release reads.
Legacy stated in the press release that letters will be sent to any patient whose information may have been involved. There is no indication now that any patient information has been misused. Legacy will offer credit monitoring to individuals whose Social Security numbers were contained in the email accounts.
According to the release, Legacy will implement additional access restrictions. Legacy Health has established a dedicated call center to answer questions for patients at 1-888-277-6762, 6 a.m. to 5 p.m. Monday through Friday.