ALBANY -- New York Oncology Hematology is providing credit reporting services to its nearly 130,000 patients and employees, after learning it was the victim of an apparent cyberattack.
The health care provider said Friday that an outside forensic firm's review of a phishing attack that happened between April 20 and April 27 found no indication of access to or attempted misuse of patient or employee information related to the attack, but the credit reporting services were being provided as a precautionary measure, according to a prepared statement.
New York Oncology Hematology said on Friday it was notifying more than 128,400 employees and patients of the review's findings and of the credit reporting services available to them. The information of patients and employees who joined NYOH after April 27 were not compromised by the phishing attack, according to NYOH's prepared statement.
Phishing attacks involve sending fraudulent email aimed at fooling a recipient into entering their user names and passwords for computer systems, information criminals then use to access those systems.
“We are deeply sorry for the concern and inconvenience this phishing attack may cause, but NYOH remains committed to protecting the security and confidentiality of our patients’ and employees’ information,” said NYOH President Dr. Ira Zackon. “We have no indication that personal data was accessed or misused.
However, we are taking precautionary steps to ensure the safety and peace of mind for those impacted.”
In the NYOH instance, an unauthorized user gained access to employee email accounts. Immediately upon discovery of the incidents, the health care provider's IT vendor took steps to shut down the compromised accounts and launched a forensic investigation.
In its letters to employees and patients, NYOH includes details about how to enroll in the free identity theft and credit monitoring services through Experian. NYOH has also activated a hotline for those who believe they may have been involved but did not receive a letter, at 1-877-753-3334.
More information is available online at newyorkoncology.com/security.