EHR vendor suffers cyberattack
EHR vendor Medical Informatics Engineering (MIE) and its personal health records affiliate, NoMoreClipboard, have been the victims of a sophisticated cyberattack.
According to information on the company's website, on May 26, MIE discovered suspicious activity relating to one of its servers and immediately began an investigation to identify and remediate any identified security vulnerability. On May 26, MIE also reported this incident to law enforcement including the FBI Cyber Squad. Law enforcement is actively investigating this matter and the forensic investigation indicated that the unauthorized access began on May 7.
The protected health information affected by this incident may include patients' names, mailing addresses, email addresses, dates of birth, and some Social Security numbers, lab results, dictated reports and medical conditions.
The cyberattack also compromised protected health information for its NoMoreClipboard subsidiary. MIE began contacting and mailing notice letters disclosing this incident to affected clients on June 2.