Data breach: Medical Mutual employee sends private information for thousands to wrong email

Data breach: Medical Mutual employee sends private information for thousands to wrong email

CLEVELAND, OH (WOIO) - Medical Mutual of Ohio has confirmed that an employee sent an internal email to the wrong person, which contained the personal information of more than 5,800 of its Medicare Advantage customers.

According to a spokesperson for Med Mutual, based in Cleveland, this was an accident because the employee typed in an incorrect email address and the data was going to a third party that didn't have authorization to be looking at private information.

According to a news release from Medical Mutual, "the unauthorized third party had access to the contents of the emails containing information which may include members' names, dates of birth, Social Security numbers, treatment and diagnosis information, health insurance information, medical treatment, and prescription information."

That mistake led the company to uncover 44 other instances where employees incorrectly sent internal emails, affecting an additional 300 customers.

The release states only 15 of the 6,119 customers affected had their social security numbers included in the emails. According to the company's spokesperson that 6,119 number is less than one percent of its total customer base.

When the problem was discovered in July, Medical Mutual brought in a third party to investigate and found the 45 emails were sent from February 2017 to July 2017.

Medical Mutual has notified the impacted customers and also established a call center to answer questions. That number is (877) 271-4091 and is staffed between 9 a.m. and  p.m. ET, Monday through Friday.

Follow Dan DeRoos on Facebook and Twitter. Have a question you want him to answer? Email him at dderoos@woio.com.

Copyright 2017 WOIO. All rights reserved.