Cyberattackers gained access to "a limited number" of Banner Health computer servers, including the servers that process payment card information where food and beverages are sold, according to an article on the Becker's Hospital Review website.
Up to 3.7 million people may be affected, making it the largest healthcare data breach of 2016.
Phoenix-based Banner said the attack targeted payment card data, and cards used at food and beverage outlets at certain Banner Health locations between June 23 and July 7.
The health system has returned to accepting all forms of payment at food outlets. Payment cards used to pay for medical services were not affected.
ISSA Introduces Healthcare Platform to Advance Safer, Cleaner Patient Environments
Third-Party Tracking Settlement is a Compliance Wake-Up Call for Healthcare Facilities Managers
ECU Health Behavioral Health Hospital Hosts Ribbon-Cutting Ceremony for New Facility
Aspire Rural Health System Reports Data Security Incident
Fatal Flaws: Strategies for Active Attackers