TERRE HAUTE, Ind. (WTWO/WAWV) — A subcontractor involved with a Union Health third-party vendor, Perry Johnson & Associates, Inc. (PJ&A), was recently involved in a cybersecurity incident.
According to a release from Union Hospital officials, “an unauthorized third-party gained access to the PJ&A network and acquired certain files from its systems. Union Health is one of several organizations affected by this incident.”
After receiving a report about a possible data breach at Union Health Hospital, WTWO reporters reached out for more information.
Union Hospital responded with the following:
PJ&A provides medical transcription services to health care organizations and recently learned that an unauthorized third-party gained access to the PJ&A network and acquired certain files from its systems. Union Health is one of several organizations affected by this incident. Importantly, this incident did not involve access to any Union Health systems or networks.
The information accessed by the unauthorized party varies per individual, but for Union Health’s patients, the impacted data did not include social security numbers, credit card information, bank account information or usernames or passwords.
PJ&A has begun mailing notification letters to those individuals whose information may have been involved in the incident.
The security of our patients’ data is of the utmost importance to us, and we regret any inconvenience this vendor incident may cause. We continue to work closely with our vendors regarding the security of our patients’ information.
Union Hospital Release



