Malware puts patient data at N.C. dermatology center at risk

Malware on a server at North Carolina-based Central Dermatology Center put its patients’ personal and financial data at risk.

On Nov. 7, the center learned that one of its servers had been compromised on Sept. 25 by malicious software. Forensic IT experts have since removed the malware, and the server has been disconnected from the system, according to a notice.

Data possibly at risk include patients’ names, phone numbers, dates of birth, Social Security numbers, billing and diagnostic codes, insurance company information, insurance co-payment information, healthcare providers, employment information, sex, treatment dates, account balances, email addresses and race.

It is unlikely that patient bank account and payment card information are at serious risk and EMRs weren't on the server as they were encrypted prior to the malware, according to the notice.

"Taking aggressive action early and confronting this issue is consistent with the practice's core value of behaving in an ethical and transparent fashion," said Greg Catt, practice administrator at Central Dermatology, in a statement. “On behalf of the people of Central Dermatology Center, we sincerely apologize for any inconvenience this may cause."