The Mount Kisco Surgery Center in Mount Kisco, New York, recently reported a data security incident affecting current and former employees and patients. The breach was first identified on November 3, 2023, when unusual activity was detected in an employee’s email account. An immediate response was initiated to secure the account, and a digital forensics firm was engaged to investigate the incident.
The investigation determined that unauthorized access occurred between October 23, 2023, and November 3, 2023. During this period, certain files within the email account were accessed, which led to concerns about the potential exposure of personal and protected health information.
On May 30, 2024, ASCW confirmed that the compromised data included names, Social Security numbers, driver’s license numbers, dates of birth, medical information, and health insurance details. Affected individuals were notified of the incident via US mail on June 26, 2024.
In response, ASCW has taken additional steps to enhance its network security to mitigate the risk of future incidents. The organization remains committed to protecting personal and health information and ensuring the security of its systems.
Reference: