DUBUQUE, Iowa (KWWL) -- As many as 34,000 patients of Grand River Medical Group could be affected by a potential data breach.
A letter was sent to all patients last week notifying them of the breach. GRMG says "an unauthorized individual gained access into an employee’s email account" allowing them to potentially view documents containing personal information, including name, social security number, date of birth, address, and more.
GRMG immediately terminated the individual's access to their system and launched an investigation. They also changed all relevant passwords and isolated the compromised account from the system.
An analysis shows no evidence any data was accessed or downloaded, but it can't be ruled out, which is why patients are being notified. All affected patients are being offered one year of complimentary identity theft protection.
Any patients with questions are asked to call 833-764-1663 for more information.
The full letter sent to patients can be found here: