COLUMBIA, S.C.—Prisma Health–Midlands is notifying individuals by mail of an incident that involved the compromise of a Prisma Health team member’s login credentials to a Palmetto Health website. On August 29, 2019, Prisma Health was alerted to the incident and promptly conducted an extensive investigation. Prisma Health determined that the compromised login credentials provided access to patient pre-registration and volunteer registration information forms previously completed on the Palmetto Health website at www.palmettohealth.org.
The personal information affected may have included an affected individual’s full name, address, date of birth and health information. In some instances, Social Security numbers and health insurance information were affected.
Fortunately, the team member’s credential access was limited to only certain forms available on the website; it is unclear how long the credentials were accessible. Other Prisma Health information, such as medical records, was not accessible with these credentials, and as such, was not affected.
Prisma Health values the confidentiality of patient information and has taken specific steps to prevent this situation from happening again. Prisma Health investigated the incident thoroughly and promptly blocked inappropriate access to the website. The team member’s password was reset. Prisma Health is continuing to take steps to enhance its security measures and update its policies and procedures to help prevent something like this from happening in the future.
In an abundance of caution, Prisma Health is attempting to notify by letter at the last known address the individuals who may have been affected by this incident.
Prisma Health recommends affected persons as always remain vigilant and monitor account statements carefully and report discrepancies to law enforcement or to the toll-free number below.
Individual patients with questions or concerns can call toll-free at 1-888-479-9996, Monday through Friday, from 8 a.m. to 5 p.m. EST, excluding major U.S. holidays. The call center will be open for approximately ninety days.