North Mississippi Health Services (NMHS) is issuing notice of a recent data security incident. They are notifying impacted patients directly and providing information below about the event, their response and steps potentially impacted individuals can take to better protect their information, should they feel it is appropriate to do so.
On July 3, 2023, NMHS became aware of unauthorized access through an employee’s email account after a phishing email was unintentionally opened. Their Security Operation Committee (SOC) promptly shut down the system, ending the unauthorized access within 17 minutes. Upon investigation, it was determined some of the employee’s emails, which may have included attachments, were potentially accessed.
The information that may have been accessed was limited to patients’ names, dates of birth, primary physicians’ names and diagnoses or dispositions upon recent discharge from North Mississippi Medical Center-Tupelo. It is important to note that no financial information, Social Security numbers or electronic medical records were accessed. Additionally, there is no evidence any information has been misused.