Lake Huron Medical Center Addresses Patient Data Security After Third-Party Vendor Incident

Lake Huron Medical Center has taken swift action following a security incident involving third-party vendor CBIZ KA and Progress Software’s MOVEit Transfer platform. Although the medical center’s systems were not directly affected, patient information handled by CBIZ KA was compromised. 

The vendor promptly investigated the MOVEit Transfer vulnerability with cybersecurity professionals, identifying and patching the server vulnerability. Patient data, including names, dates of birth, addresses, medical record numbers, Social Security Numbers, admission and discharge dates, were potentially exposed. CBIZ KA is reinforcing protocols with vendors to prevent future incidents. 

To address concerns, Lake Huron Medical Center has set up a dedicated call center (1-866-547-6909) for affected patients, open Monday – Friday, 9:00 a.m. – 6:30 p.m. 

Reporting for WGRT – Choze Powell