Atrium Health said a cyber incident involving a vendor it uses for billing services may have exposed the personal information of 2.65 million patients.
AccuDoc Solutions, Inc. informed Atrium, formerly known as Carolinas HealthCare System, that there may have been unauthorized access to its databases.
Those databases contained personal information related to patient payments from Atrium locations as well as locations Atrium manages.
Atrium said the compromised information included patients’ names, addresses, dates of birth, insurance policy information, medical record numbers, invoice numbers, account balances and dates of services.
Atrium estimates about 700,000 of the exposed records may have also included Social Security numbers. Atrium Health is the largest health care system in both North and South Carolina.