Hospital reports data breach

POST FALLS — The Rehabilitation Hospital of the Northwest in Post Falls on Friday reported a data security incident that involved patient information.

The hospital was alerted Feb. 1 to unusual activity in its information technology environment. In response, it promptly secured and isolated its IT systems, a press release said. 

The Rehabilitation Hospital of the Northwest also began an investigation with assistance from a third-party cybersecurity firm and has been in communication with law enforcement, according to the release.

Through an ongoing investigation, it was determined an unauthorized party gained access to the hospital's IT network between the dates of Jan. 16 and Feb. 4. 

"While in the hospital's IT network, the unauthorized party accessed and/or acquired files that contain information pertaining to certain patients, including names and one or more of the following: addresses, dates of birth, medical record numbers, health insurance plan member IDs, claims data, diagnosis and/or prescription information," the release said. "For some patients, this information may have included their Social Security and/or driver’s license numbers."

The hospital is mailing letters to patients whose information may have been involved in the incident. Patients whose Social Security and/or driver’s license numbers may have been involved are being offered complimentary credit monitoring and identity protection services. 

A toll-free incident response line has been established to answer questions. Those who believe their information was involved are asked to call 844-563-2187 or visit rhn.ernesthealth.com.

Patients whose information was involved in the incident are recommended to review the statements they receive from their health care providers and contact the relevant provider if they see services that they did not receive.

The Rehabilitation Hospital of the Northwest expressed it is taking the incident seriously and regrets any concern this may cause. The hospital has implemented and will continue to adopt additional safeguards and technical security measures to further protect and monitor its systems, the release said.