Fresenius Confirms Patient Health Data Breach From August Attack

Fresenius Medical Care confirmed that an unauthorized individual accessed an employee account on Aug. 18 and viewed and copied files containing personal and health information. The company detected suspicious activity the next day and secured the account, then determined on Aug. 28 that identifiable personal information had been affected; its review is ongoing, per a Nov. 5 notice. Exposed data may include names, addresses, dates of birth, Social Security numbers, medical record numbers, health insurance information and treatment information; no payment card or bank account data has been found so far. Fresenius has not disclosed how many people were affected and said the incident did not affect medical devices, patient care, manufacturing or business continuity. Once the review concludes, the company plans to notify affected individuals and offer credit monitoring and identity theft restoration services.