On July 28th, 2020, Beaumont Health notified patients of a data breach that occurred between January 3rd and 29th of this year. According to Detroit Free Press, six employee email accounts were accessed after falling victim to a phishing scam. These accounts held private patient information, including names, dates of births, diagnosis, procedures, treatment locations, prescription information, and more.
The company was first made aware of the breach in January and immediately began an investigation which concluded on June 5th. While they do not have evidence that patients’ medical information was viewed or acquired by an unauthorized third party, they are still issuing notices to anyone whose data may have been in the email accounts.
The roughly 6,000 patients were notified of the breach on Tuesday and told to monitor their insurance statements for unauthorized purchases.
This is not the first data breach that has occurred at Beaumont Health. In January, the company reported that they had fired an employee after discovering they had been transferring confidential files to someone working for an attorney between 2017 and 2019. The company also announced another email phishing scam earlier this year, which affected 112,000 people. The company has improved its multi-factor authentication software and increased employee training on handling emails in response to previous breaches.
Beaumont has set up a toll-free response line for those who want to find out more about the incident or learn if they have been affected. Individuals can call 844-925-2476 between 9 am-6:30 pm, Monday-Friday.
Ali Saeed is an experienced attorney representing victims of data breaches. His firm has announced that they will conduct an investigation of the potential medical data breach at Beaumont Health. The firm will try to determine whether confidential medical information was acquired by the third-party that gained access to Beaumont’s email system.
Mr. Saeed is currently communicating with Beaumont Health patients to make sure they understand their legal options after a data breach. If a large number of patients had their information exposed, it could lead to legal action in the form of a class-action lawsuit.
While still in its early stages, Mr. Saeed believes that if the investigation uncovers evidence that prompts a data breach class-action lawsuit against Beaumont Health, his firm has the resources and experience to represent the victims of an alleged data breach of medical information.