Newman Regional Health

Newman Regional Health, a 25-bed critical access hospital in Emporia, Kansas, experienced a significant data breach that went unnoticed for nearly a year. The breach, which was disclosed on April 19, 2022, affected 52,224 individuals. Unauthorized access to a limited number of employee email accounts occurred between January 26, 2021, and November 23, 2021

The compromised email accounts contained sensitive information, including names, medical record numbers, birth dates, email addresses, phone numbers, addresses, treatment information, employee information, and in some cases, Social Security numbers and financial information

The hospital’s investigation concluded on March 14, 2022, and it is unclear when the breach was first discovered

Newman Regional Health has since taken steps to enhance security, although specific measures were not detailed in the reports

The hospital has notified affected individuals and recommended that they review the provided identity theft information to mitigate risk

There has been no evidence of fraudulent activity as a result of the breach at the time of issuing notification letters

In response to the incident, Newman Regional Health has implemented additional security measures to prevent similar breaches in the future

The hospital has also provided information about checking a child’s credit and guidance regarding identity theft