Bon Secours Health System, Inc.

Bon Secours Health System, Inc. notified South Carolina residents that a vendor, R-C Healthcare Management, inadvertently left files containing patient information accessible via the internet between April 18-21, 2016. Bon Secours discovered the issue on June 14, 2016. Affected data included names, SSNs, insurance IDs, and limited clinical info. No medical records were exposed. Bon Secours offered one year of credit monitoring.

Bon Secours Health System Incorporated reported to HHS on 2016-08-12 a Unauthorized Access/Disclosure affecting 651971 individuals. Breached information located on Network Server. A business associate left ePHI (names, SSN, clinical info) unsecured via the Internet. The CE terminated the BA relationship and offered credit monitoring.

Bon Secours Health System, Inc. disclosed that its vendor, R-C Healthcare Management, inadvertently left patient files accessible via the internet from April 18 to April 21, 2016, due to network configuration errors. Bon Secours discovered the issue on June 14, 2016. Affected data may include names, health insurer names, health insurance ID numbers, social security numbers, and limited clinical information. Medical records were not exposed. The organization offered one year of identity protection services to affected individuals.

Bon Secours Health System, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-08-12. 447 Massachusetts residents were affected. The report records the breach type as electronic.

Bon Secours Health System notified Montana AG that vendor R-C Healthcare Management inadvertently exposed patient files via the internet between April 18-21, 2016. Bon Secours discovered the exposure on June 14, 2016. Data included names, SSNs, health insurance IDs, and limited clinical info. Bon Secours offered 1-year credit monitoring.