Barry University announced Monday night it is notifying patients of its Foot and Ankle Institute that their medical records and personal information may have been hacked.
The security breach was detected around May 14th via a school laptop infected by a form of malware - software used mainly to gain access to private computer systems.
The university launched a probe and hired an outside computer forensic company to investigate the extent of the infection and remove the malware infection from the university’s network, the school said in a news release.
The affected files have been restored to their original state and there is no longer any evidence of active malware on the device, the school said.
But Barry University has determined - seven-months after the incident - that certain sensitive information of patients treated at the institute may have been compromised. The number of patients affected was not released by the school.
The information at risk includes patients’ full name, date of birth, Social Security number, bank account number, credit/debit card number, driver’s license number, medical record number, health insurance information, diagnosis, and/or health information about specific treatment they received at the Miami Shores school.
“Due to the complexity of the malware infection, the university cannot conclusively determine whether the malware was able to expose any of its patients’ or guarantors’ personal information or whether an unauthorized person acquired the information,” the news release said.
Out of an abundance of caution, the university said, it is notifying each individual patient whose records were at risk.
The university added it has not received any reports of identity fraud or theft resulting from the breach. Barry said it has taken steps to secure its computer system.
The university is offering a complementary 12-month credit monitoring service to affected individuals.
For more information, call Barry University’s toll-free dedicated call center at 1-800-981-7571, Monday-Friday between 9 a.m. and 9 p.m. EST. Callers will need to use reference number: 47933.