Some patients of North Country Healthcare are being notified that their health information may have been improperly accessed as a result of ransomware attack on a vendor used by NCH facilities.
The vendor — CaptureRx — is a third party administrator that provides services for North Country Healthcare facilities. As permitted by law, NNorth Country HealthcareCH provides health information about its patients to CaptureRx to allow CaptureRx to provide these services.
Hackers accessed CaptureRx’s computer systems on Feb. 6. CaptureRx detected the suspicious activity and confirmed on Feb. 19 that improper access had occurred.
CaptureRx then conducted a detailed investigation to determine which files had been accessed. It completed this review on March 19.
CaptureRx notified North Country Healthcare facilities of the improper access in early April. CaptureRx stated that the following information had been accessed: patients’ first and last names, date of birth, prescription information and medical record number for some patients.
CaptureRx assured NCH facilities that the computer vulnerability that permitted the improper access has been identified and corrected.
CaptureRx noted that, as of the date of the notification, its investigation had found no evidence of actual or attempted misuse of the information as a result of the breach. Nonetheless, North Country Healthcare patients are encouraged to review their account statements and explanation of benefit forms and to obtain free credit reports to confirm no suspicious activity has occurred. The notice to North Country Healthcare patients affected by the breach provided detailed guidance on preventing identity theft.
North Country Healthcare patients have been notified of this matter. Also, North Country Healthcare has filed a report with the federal Department of Health and Human Services as required by federal law.
If North Country Healthcare patients would like further information about this matter, they are encouraged to contact the NCH Privacy Officer at (603) 326-5608.