Henry Ford Health Struck with Data Breach

An unauthorized person used a phishing email attack to gain access to business email accounts.

By HFT Staff


Henry Ford Health is notifying some of their patients that an unauthorized individual conducted an email phishing scheme to gain access to business email accounts. The improper access was quickly discovered, and the email accounts were secured.  

Here are important facts to know:  

  • Some of the patient information was contained in the affected email boxes, but they do not know whether such information was actually accessed or not.  
  • Phishing email schemes are used to fraudulently obtain victims’ credentials or personal information by sending them fake email messages.  

The incident occurred on March 30, 2023, and Henry Ford Health immediately began an extensive investigation to determine what happened.  

Through their forensics investigation, they determined on May 16, 2023, that protected health information was contained in the email boxes and could have been accessed by the bad actor.  

The information stored on the affected email accounts may have included the following: name, gender, date of birth, age, lab results, procedure type, diagnosis, date of service, telephone number, medical record number and/or internal tracking number.  

As a result of this incident, Henry Ford Health is implementing additional security measures and providing additional training to employees about recognizing the signs of suspicious email and what to do if they receive one. 



July 20, 2023


Topic Area: Information Technology , Safety , Security


Recent Posts

Case Study: How NYU Langone Rebuilt for Resilience After Superstorm Sandy

Although the damage was severe, it provided a valuable opportunity for NYU Langone to assess structural vulnerabilities and increase facility resilience.


Frederick Health Hospital Faces 5 Lawsuits Following Ransomware Attack

The lawsuits accuse FHH of inadequate cybersecurity, poor breach notification and failing to protect patients from identity theft risks.


Arkansas Methodist Medical Center and Baptist Memorial Health Care to Merge

They have signed a non-binding letter of intent to complete a shared mission agreement to merge the two organizations.


Ground Broken on Intermountain Saratoga Springs Multi-Specialty Clinic

The clinic is scheduled to open and start seeing patients in the fall of 2026.


Electrical Fire Tests Resilience of Massachusetts Hospital

Signature Healthcare Brockton Hospital used opportunity to renovate key systems and components and expand facility operations.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.