HCA Healthcare reports data security incident affecting patient contact and appointment information

HCA Healthcare, Inc.

• Unknown unauthorized party posted patient names, email, phone, birth date, gender, service date, and appointment location on an online forum.
• Excluded data: clinical treatment/diagnosis, payment info, passwords, driver's license, and Social Security numbers.
• Theft occurred from an external storage location used to format email messages; no disruption to patient care or operations.
• Company reported incident to law enforcement, retained forensic advisors, disabled access, and will offer credit monitoring to impacted patients.
• HCA believes the incident will not materially impact its business, operations, or financial results based on current information.