Yale University is alerting patients of a late summer computer hack that might compromise patient privacy.
“On September 12, 2022, Yale Medicine learned that an unauthorized third party accessed a computer on or about August 11, 2022, and installed malicious software that rendered files on the computer inaccessible.
“The computer stored information about patients seen at Dr. Tito Vasquez’s former practice, Connecticut Plastic Surgery Group LLC, between 2009 and May 3, 2021. The information included patients’ names, as well as demographic information, insurance information, and visit notes. For a small number of patients, photographs, Social Security numbers, driver’s licenses, and credit card numbers were also included. There is no indication that any of the information was misused or shared, and the incident did not involve the records of any other Yale Medicine practices. All medical records created by Dr. Vasquez’s practice after May 3, 2021, have been securely stored in Yale’s medical record system and were not affected by this incident.
“Yale is mailing letters to patients whose information may have been involved and offering them complimentary credit monitoring and identity protection services. Patients are encouraged to activate the complimentary services being offered and are reminded that it is always a good idea to watch for signs that their personal information is being misused and report any suspicious activity to local law enforcement authorities.
“Yale takes patient privacy and security seriously and has policies and procedures in place to protect patient privacy. Yale is conducting a thorough investigation and taking steps to help prevent similar incidents from happening in the future, including reviewing computer security at Yale Medicine practice groups and improving procedures for securing computers owned by practices that join Yale Medicine.
“Patients seen by Dr. Tito Vasquez at Connecticut Plastic Surgery Group LLC between 2009 and May 3, 2021, who have questions or concerns related to this incident may call the dedicated toll-free helpline at 855-926-1375, Monday through Friday between 9 a.m. and 6:30 p.m. Eastern Time, excluding major U.S. holidays, or visit https://ym.care/dataincident2022.