By The Lake Huron Medical Center
(Port Huron, MI – December 4, 2023) – Today, Lake Huron Medical Center announced it is mailing notification letters to patients whose information was involved in a third-party vendor incident involving Progress Software’s MOVEit® Transfer secure file transfer platform, which impacted many users around the world. Lake Huron Medical Center’s systems were not involved in this incident.
CBIZ KA, a third-party vendor for Lake Huron Medical Center, discovered a security incident involving CBIZ KA’s use of MOVEit Transfer software. Lake Huron Medical Center takes the responsibility of safeguarding patient information very seriously, and while its systems were not involved in the incident, CBIZ KA uses MOVEit Transfer to securely transfer data files in the normal course of business.
CBIZ KA promptly launched an investigation, with the assistance of cybersecurity professionals, into the nature and scope of the MOVEit vulnerability. CBIZ KA sent Lake Huron Medical Center the files of its patients involved, which contained the name and one or more of the following for certain patients: date of birth, address, medical record number, Social Security Number, admission date, and discharge date.
The identified vulnerability on the MOVEit Transfer server has been patched. CBIZ KA also reviewed the protocols in place with vendors to help prevent something like this from happening again.
A dedicated call center has been established to answer questions about this incident, which can be reached at 1-866-547-6909, Monday through Friday, between 9:00 a.m. and 6:30 p.m. Eastern Time (excluding major U.S. holidays).
To learn more about the programs and services offered at Lake Huron Medical Center, visit www.mylakehuron.com.
