Privacy and Breach Alerts

UPMC Cole has notified 790 patients treated at UPMC Cole that their personal information may have been inappropriately accessed. 

“We apologize for any concern or inconvenience that this may cause for our patients. I want to stress that patient care was never affected,” said UPMC Cole’s President and Senior Executive, Ed Pitchford. “UPMC is committed to meeting our patients’ privacy expectations. We cannot confirm if any of the information was used for improper purposes, but, out of an abundance of caution, we deemed it appropriate to inform those possibly affected by this breach.”

As a result of UPMC Cole’s internal investigation, it was determined that there were two phishing attacks (e-mails sent from an external source that look like they are from a trusted source attempting to obtain sensitive information and often contain links to a phony login page or fake website) on June 7th and June 14th that were discovered through staff reports of the receipt of the e-mails.  The phishing attacks were isolated to e-mail accounts and no medical records systems were breached.  The following information was discovered in the e-mails to varying degrees for each patient,  including  patients’ names, dates of birth, scheduling information, types of procedures, names of providers, and other general treatment information.  No patient Social Security numbers were accessed during the phishing attacks.

UPMC Cole has notified the U.S. Department of Health and Human Services as required by the Federal Health Insurance Portability and Accountability Act (HIPAA) that the information may have been accessed. 

UPMC Cole has sent letters notifying all of the patients affected.

UPMC Cole has provided patients with information on how to place a fraud alert in their files with the three major credit-reporting companies, and has supplied them with links to access identity protection resources available through the Federal Trade Commission. UPMC Cole has also set up a toll-free telephone line with representatives who can answer questions from these patients and respond to any concerns.

UPMC Cole took immediate corrective action by blocking the unwanted access.

“We are committed to keeping patient information secure and strive to continually implement improvements to prevent such an incident from happening again,” Mr. Pitchford said.

About UPMC Cole

UPMC Cole is a regional health system dedicated to the health and wellbeing of over 60,000 residents in Cameron, McKean, Potter and Tioga counties, plus surrounding areas. The system employs more than 800 people including more than 70 healthcare providers practicing evidenced based medicine with a goal of advancing comprehensive health for the citizens of northcentral ​

UPMC | Affiliated with the University of Pittsburgh Schools of the Health Sciences | Supplemental content provided by Healthwise, Incorporated. To learn more, visit www.healthwise.org

For help in finding a doctor or health service that suits your needs, call the UPMC Referral Service at 412-647-UPMC (8762) or 1-800-533-UPMC (8762). Select option 1.

UPMC is an equal opportunity employer. UPMC policy prohibits discrimination or harassment on the basis of race, color, religion, ancestry, national origin, age, sex, genetics, sexual orientation, gender identity, marital status, familial status, disability, veteran status, or any other legally protected group status. Further, UPMC will continue to support and promote equal employment opportunity, human dignity, and racial, ethnic, and cultural diversity. This policy applies to admissions, employment, and access to and treatment in UPMC programs and activities. This commitment is made by UPMC in accordance with federal, state, and/or local laws and regulations.

Medical information made available on UPMC.com is not intended to be used as a substitute for professional medical advice, diagnosis, or treatment. You should not rely entirely on this information for your health care needs. Ask your own doctor or health care provider any specific medical questions that you have. Further, UPMC.com is not a tool to be used in the case of an emergency. If an emergency arises, you should seek appropriate emergency medical services.

UPMC
Pittsburgh, PA, USA | UPMC.com