Skip to content

Advocate Aurora Health discloses breach tied to online data tracker

Advocate Aurora Health, which operates 27 hospitals, said in a statement that the breach may have exposed information including a patients' medical provider, the type of appointment or medical procedure, dates and locations of scheduled appointments, and IP addresses.

Associated Press
Associated Press
| 3 min read
Advocate Aurora Health discloses breach tied to online data tracker

By KATHLEEN FOODY | The Associated Press

CHICAGO (AP) — Personal health information of up to 3 million patients in Illinois and Wisconsin may have been exposed to outside companies through tracking technology used on a large hospital system's electronic health records website.

Advocate Aurora Health, which operates 27 hospitals, said in a statement that the breach may have exposed information including a patients' medical provider, the type of appointment or medical procedure, dates and locations of scheduled appointments, and IP addresses.

The system said its investigation found no social security number, financial information or credit and debit card numbers were involved.

The system blamed the breach on its use of pixels — computer code that collects information on how a user interacts with a website — including products developed by Google and Facebook's parent company Meta that make the collected data accessible to those companies.

“These pixels would be very unlikely to result in identity theft or any financial harm, and we have no evidence of misuse or incidents of fraud stemming from this incident,” the statement said. “Nevertheless, we always encourage patients to regularly review their financial accounts and report any suspicious, unrecognized or inaccurate activity immediately.”

The health care industry's use of pixels has come under wide criticism from privacy advocates who warn that the technology's use violates federal patient privacy law.

A report published in June by The Markup found many of the country's top-ranked hospitals used the Meta Pixel, collecting and sending sensitive patient information to the social media company.

Advocate Aurora Health's statement did not specify what triggered its decision to publicize its use of pixels in the MyChart site where patients schedule appointments, communicate with providers' offices and view test results. The statement said the health system has disabled or removed all the pixels and is continuing to investigate internally.

The health system notified the Department of Health and Human Services of the breach affecting up to 3 million patients on Friday, according to the agency's public log of its investigations.

Nicholson Price, a law professor with a focus on healthcare innovation at the University of Michigan, said the announcement is a reminder that health information is often less protected than U.S. consumers hope.

“Patients view these log-in sites as a place to see particularly private information,” Price said. “So it's more surprising (for them) to learn about this kind of tracking technology used there.”


Subscribe to the Chicago Journal


The Chicago Journal needs your support.

At just $20/year, your subscription not only helps us grow, it helps maintain our commitment to independent publishing.

CLICK HERE TO SUBSCRIBE

If you're already a subscriber and you'd like to send a tip to continue to support the Chicago Journal, which we would greatly appreciate, you can do so at the following link:

Send a tip to the Chicago Journal


Subscribe to the Chicago Journal

HealthTechnologySci/TechLifestyleChicagoland NewsNews

Associated Press Twitter

News and content from The Associated Press, which has been covering the world's most important stories since 1846.


Related Posts

NW Indiana man gets 70 years for torture death of 4-year-old son

The lead LaPorte County investigator in the case described video footage from inside the family's home that showed Alan Morgan repeatedly abusing Judah Morgan in the days leading up the discovery of his dead body on Oct. 11, 2021.

NW Indiana man gets 70 years for torture death of 4-year-old son

Two men arrested in fatal shooting of 12-year-old girl

Moore was in the passenger seat of a family member’s car when three men fired on another vehicle and a bullet struck her in the back of the head. One of the men has 11 prior arrests.

Two men arrested in fatal shooting of 12-year-old girl

States settle with Google, iHeartMedia over misleading ads

The settlement bars Google from making misrepresentations in endorsements of its products for 20 years. Arizona, Georgia, Illinois, Massachusetts, New York, and Texas and the Federal Trade Commission were part of the settlements.

States settle with Google, iHeartMedia over misleading ads