IRise Florida Spine and Joint Institute in Boca Raton issued a data breach notice to patients after it was found someone had unauthorized access to an employee email account.
The data breach report was submitted to the U.S. Department of Health and Human Services on Jan. 21. The breach affected 61,595 individuals.
On Nov. 22, employees at the practice discovered an email account was accessed between Feb. 24 and 26, according to a notice from the practice. The breached account contained identifiable information, but there has not been evidence that any of the data was misused.
IRise sent notification letters to everyone affected by the breach, the notice said. Data in the breached email account included names, birth dates and medical information. Some individuals' Social Security numbers, credit card numbers and driver's license numbers were compromised.