Cyberattackers gained access to "a limited number" of Banner Health computer servers, including the servers that process payment card information where food and beverages are sold, according to an article on the Becker's Hospital Review website.
Up to 3.7 million people may be affected, making it the largest healthcare data breach of 2016.
Phoenix-based Banner said the attack targeted payment card data, and cards used at food and beverage outlets at certain Banner Health locations between June 23 and July 7.
The health system has returned to accepting all forms of payment at food outlets. Payment cards used to pay for medical services were not affected.
17 Million Patient Records Stolen in PIH Health Ransomware Attack
Holidays are Prime Times for Healthcare Cyberattacks
Hartford Healthcare Forms Partnership to Open Health Equity Clinic
UCHealth Reveals Plans for Memorial Hospital North Expansion
What Are 'Hospi-tels'?