Sacred Heart Health System

Sacred Heart Health, also known as Sacred Heart Health System, operates as a health system in the United States. Its headquarters is located within the United States of America. The organization delivers medical care and health services to patients. It manages billing and administrative functions associated with patient care. The organization contracts with third-party vendors to handle certain billing operations.

On February 2, 2015, a third-party billing vendor working with the organization experienced a phishing attack. The attack compromised an employee email account at the vendor. As a result, billing information for approximately 14,000 patients was exposed. The exposed data included names, service dates, birth dates, diagnoses, procedures, charges, and physician names. For 40 of those individuals, social security numbers were also accessed.

The organization notified all affected patients about the breach. It offered identity monitoring services specifically to the patients whose social security numbers were compromised. The organization collaborated with forensic experts to investigate the incident. It confirmed that no medical records were breached in the event. The organization stated it was working with the vendor to enhance security practices to prevent similar occurrences.