A Birmingham-based medical practice is informing patients of a data breach that could have compromised personal information.
CVA said that some of the personal information involved may include one or more of the following:
- Demographic information to identify and contact the patient, such as full name, date of birth, and address
- Social security number
- Health insurance information, such as name of insurer/government payor and member ID, policy and/or group number
- Medical and treatment information, such as medical record number, dates of service, provider and facility names, other visit, procedure and diagnosis information, and possibly assessments, tests and imaging
- Billing and claims information, such as account and/or claim status, billing and diagnostic codes, and payor information
- Passport and driver’s license number
- Credit and debit card information
- Financial account information
