Sarah D. Culbertson Memorial Hospital disclosed a recent data breach to the Massachusetts Attorney General’s office on November 21, 2023, unveiling unauthorized access to its computer network. The breach resulted in the exposure of sensitive patient information, including names, dates of birth, Social Security numbers, medical diagnoses, treatment details, and health insurance information.
The incident, detected on March 30, 2023, triggered immediate actions from Culbertson, securing its network, involving law enforcement, and collaborating with third-party data security experts to investigate and assess the impact on patient data. Investigations confirmed unauthorized access to the hospital’s network between March 27 and March 30, 2023, leading to the acquisition of confidential patient information by the unauthorized party.
Culbertson Memorial Hospital conducted a comprehensive review of compromised files to identify the leaked information and affected consumers, leading to data breach notification letters sent to impacted individuals. The breached information varied but potentially included personal details such as names, Social Security numbers, medical history, and health insurance details.
Earlier notifications were disseminated via website notices and data breach letters on May 8, 2023. However, the recent filing with the Massachusetts Attorney General suggests further communications might have been dispatched to affected individuals.
Located in Rushville, Illinois, Culbertson Memorial Hospital encompasses a 22-bed facility providing a spectrum of services including rehabilitation, imaging, laboratory, outpatient behavioral health programs, surgical services, and therapy. Additionally, the hospital operates family practice clinics in Astoria, Beardstown, and Rushville. Employing over 200 individuals, Culbertson generates an annual revenue of approximately $17 million.
