Healthcare IT News recently reported that hackers broke into a cloud-based server hosted and managed by TekLinks that contained the health and personal information of patients from Surgical Dermatology Group (SDG). The Alabama-based skin care practice posted a notice on its website that TekLinks notified SDG on June 7 that the attack on the server occurred around March 23. From April 22 to May 1, TekLinks monitored the server and found no further evidence of any data breaches.
SDG then hired a forensic investigator to look into the breach. They found that the server contained the names of the patients, their ID and Social Security numbers, home addresses, contact information, health plan information, payment history and the names of their physicians. The servers, however, did not contain the patients’ credit card or bank account information.