St. Luke’s informed of vendor data breach

July 27, 2022 - Boise - St. Luke’s Health System was recently informed by one of its business vendors of a cybersecurity incident that occurred in late May 2022. St. Luke’s has had a contract with the vendor to provide statement processing and billing services. The vendor determined in June 2022 that an unauthorized actor obtained personal information about some patients and members of certain customers. On July 6, St. Luke’s learned that protected health information of patients who were billed in May 2022 for St. Luke’s services could have been accessed as part of this vendor’s cybersecurity incident. While the investigation is ongoing, St. Luke’s has expedited the notification process to communicate now with those who may have been impacted.