Management and Services Network acts as a business associate, providing administrative support to post-acute care providers.
A version of this article was first published May 26, 2020, by HCPro's Revenue Cycle Advisor, a sibling publication to HealthLeaders.
The Ohio-based company Management and Services Network (MNS) recently notified 30,132 patients that their protected health information (PHI) was potentially compromised during security incidents that occurred between April and July 2019.
MNS acts as a business associate (BA), providing administrative support to post-acute care providers.
Related: What One Hospital Learned From a Ransomware Attack
According to a press release posted by MNS, the company became aware on August 21, 2019 that the email accounts of five employees may have been accessed without authorization between April and July of that year. These accounts were believed to contain PHI.
On March 5, 2020, MNS provided notification to the post-acute care providers whose patients may have been impacted. On May 4, MNS provided notification to individuals who had not received notification from their providers.
Related: Cybersecurity is Top Issue for Hospital IT Professionals, Creating New Workforce Dynamics
The notification letters sent to individuals included recommended steps that individuals can take to protect their information, as well as the phone number to a toll-free call center established by MNS to field inquiries relating to the incident.
MNS said it has strengthened password policies throughout the organization and is working to expand the use of multi-factor authentication to all employees.
Revenue Cycle Advisor combines all of HCPro's Medicare regulatory and reimbursement resources into one handy and easy-to-access portal. News is not just repeated from other sources. It is analyzed by our Medicare experts so professionals can comprehend any new rule and regulatory updates thoroughly. Learn more.