Sinai > Data Privacy Notification

Data Privacy Notification

M&T Bank (M&T) takes the privacy and confidentiality of the information provided to us very seriously. This notice is regarding a recent incident at M&T, a banking vendor of Sinai Hospital of Baltimore (“Sinai”), that may have involved some Sinai patient information.

M&T manages accounts receivable services for Sinai, which includes receiving patient payment information. On April 30, 2020, M&T notified Sinai that an unknown individual fraudulently obtained copies of some documents related to Sinai patient accounts between December 17, 2019 and April 30, 2020. M&T advised that it immediately took steps to implement additional security precautions on the Sinai account and began a comprehensive review of the documents the unauthorized individual had access to. This review determined that some of the information may have included patients’ names, addresses, driver’s license or government identification numbers, Social Security numbers, hospital account numbers, health insurance information, and descriptions about the care patients received at Sinai, such as providers’ names and information regarding diagnoses, medications, and treatment.

The incident did not affect all Sinai patients; rather this affects only some individuals who made payments to Sinai, or on whose behalf payments were made to Sinai by a guarantor or insurance company, between October 25, 2019 and April 27, 2020.

At this time, Sinai and M&T are unaware of any misuse of any information. On June 29, 2020, Sinai began mailing letters to patients whose information was accessible at M&T. If you believe you have been affected and do not receive a letter by July 31, 2020, please call 1-855-907-2107, Monday through Friday, 9:00 a.m. to 9:00 p.m. Eastern Time. For those individuals whose Social Security number, driver’s license or government identification number was contained in the account, Sinai and M&T are offering complimentary credit monitoring and identity protection services. Additionally, Sinai and M&T also recommends that patients review statements they receive from their health insurer. If they see services they did not receive, they should contact the insurer immediately.

Sinai and M&T regret any inconvenience this incident may cause the patients. To help prevent something like this from happening again, M&T has advised that it is has implemented additional security measures for account access and has provided additional training to account servicing personnel.