An unauthorized user had access to an IU Health employee’s email for 14 days in October, according to a release from the health system.
The health system detected unusual activity with the employee’s account on Oct. 18 and launched an investigation, using the help of an outside forensics group.
The investigation determined the unauthorized user had access to the employee’s email from Oct. 4-18.
IU Health began contacting people whose information was compromised on Tuesday.
The investigation showed the information compromised varies for the people affected, according to IU Health. But it included address, age, medical record number, diagnosis, or other limited treatment information.
The investigation hasn’t found that financial or Social Security information was compromised.
Read more: IU Health to eliminate non-compete clauses for all primary care physicians
IU Health’s announcement advised people check that anyone who is reaching out about personal or health information is a legitimate representative of the organization they say they are associated with.
IU Health is Indiana’s largest healthcare system, serving more than 1 million patients a year and employing 38,000 people.
IU Health declined to respond to questions or provide an interview.
