UPMC is reporting a massive data breach that likely affected more than 36,000 patients, according to a press release.
Officials say the data breach was reported to them by Charles J. Hilton & Associates, who provides billing-related legal services to the health system, whose email system was reportedly hacked.
An investigation reportedly revealed that some thousands of patients may have had their personal data, including Social Security numbers, dates of birth, or bank or financial account numbers, accessed by the hackers.
UPMC is working to notify affected patients and is asking them to monitor their personal information against incidents of identity theft and fraud, and report any suspicious activity.
Investigators say the reported hack occurred sometime between April 1, 2020 to June 25, 2020.