Breach affects 900 patients in North Carolina
Documents containing sensitive information were accidentally submitted as part of a court filing, leading to a data breach affecting 900 patients.
Greenville, N.C.-based Vidant Health discovered the incident on Jan. 14, according to a sample notification letter from the health system.
"Although Vidant Health believes it was appropriate to include your name, service dates, account balance and redacted account number in this filing, we additionally included your Social Security number, full account number, medical record number, date of birth, telephone number, sex and marital status," the letter reads. "Vidant Health has filed a motion to restrict public access to its previous submission."
All affected patients will receive free identity protection services for a year. Vidant also said it has updated its policies and retrained staff.
In February, Vidant notified employees of unauthorized access of their personal information at Vidant Duplin Hospital in Kenansville, N.C.