“Atrium said it’s difficult to precisely determine what data was transmitted to third-parties, but it’s assuming that all users of the MyAtriumHealth or MyCarolinas patient portal between January 2015 and July 2019 are affected.”
Atrium Health put Google and Facebook tracking code on its patient portal and left it there for four and a half years. The exposure list covers IPs, cookies, names, emails, phone numbers, addresses and treatment or provider details. A 2022 review found nothing. Atrium calls it a breach now, but it was the website working as built.