OMC: No evidence data breach was initiated internally - KTTC Rochester, Austin, Mason City News, Weather and Sports

OMC: No evidence data breach was initiated internally

Posted: Updated:

ROCHESTER, Minn. (KTTC) -- Olmsted Medical Center says there's no evidence a data breach that may have compromised employees' Federal W-2 statements was initiated internally.

OMC spokesman Jeremy Salucka said in a new statement Thursday afternoon that employees whose personal information may have been unlawfully accessed officially reside in Minnesota, Iowa, Wisconsin, Oklahoma, and Oregon.

"We've informed OMC employees that the personal information compromised as part of this breach may have included employees' Federal W-2 statements, but in truth we're still investigating what specific information was illegally accessed," Salucka said in an email to KTTC Thursday morning.

Salucka said OMC is treating the breach as a criminal act.

"We're working with the FBI's Cyber Crimes division, technical computer forensics experts, and other resources to learn as much as it can about the origin/nature of the breach," Salucka said. "As with many online information breaches, this process can be extremely complex and time-consuming."

OMC became aware of the unauthorized access to employee data Monday, and verified the breach on Wednesday. 

Salucka said there is no indication that protected health information was compromised.

"What we have no evidence of at this point is any breach of employee or patient protected health information (PHI), medical records, and financial institution accounting/routing numbers," Salucka said.

OMC has notified the FBI and IRS of the breach and has urged its employees to take preventive steps to protect their identities and personal information.

On Thursday, Salucka said OMC took additional actions to deal with the data breach including allocating personnel to help employees with identity theft protection.

OMC also says it has partnered with a Rochester Police Department Advanced Crime Prevention/CPTED Specialist to lead identity-theft-prevention sessions with OMC employees during the week of Feb. 10-14.

Powered by Frankly