Former IT employee accessed data of over 1 million US patients

Geisinger disclosed that in November 2023 a former Nuance employee accessed certain patient records after termination; Nuance revoked the individual’s access, notified law enforcement, and the person was arrested. Exposed data types reportedly included names, phone numbers, dates of birth, addresses, admission/discharge codes, medical record numbers, race/gender, and facility abbreviations, while financial information and SSNs were not affected. The scope and any subsequent dissemination are unclear, and affected individuals are advised to monitor their records and insurance statements.