Einstein Hospital Says Cyberattack Accessed Some Patient Data

Summary

Einstein Hospital says a cyberattack accessed part of its patient database, potentially including identifying and health information. It found no evidence of disclosure or misuse and notified affected patients and authorities.

Key points

• The hospital said a suspected incident on August 4 led it to confirm unauthorized access to part of its patient database.
• Affected information may include names, CPF identifiers, birth dates, prescriptions, and test results.
• The hospital said many of the documents were standalone and could not be linked to an individual.
• Einstein said it found no evidence that the data had been disclosed or misused.
• The hospital reported the incident to Brazil’s National Data Protection Authority and Federal Police.
• Affected patients are being notified individually by email; monitoring and investigation are ongoing.
• The hospital said patient care, electronic medical record systems, and operations were not disrupted.