Thompson Coburn law firm reports data breach involving Presbyterian Healthcare patients

In a recent disclosure, St. Louis-based law firm Thompson Coburn, which provides legal services to Presbyterian Healthcare Services, reported a data breach that occurred in late May and impacted the protected information of some of the healthcare system’s patients. According to Presbyterian Healthcare Services spokesperson Amanda Schoenberg, unauthorized access on May 28-29 led to a potential exposure of sensitive data, including Social Security numbers, dates of birth, and health insurance details. The breach affects individuals whose information may have been accessed or taken by an unauthorized actor.

While letters are being sent this week to potentially affected patients, Presbyterian and Thompson Coburn have stated that there is no evidence of identity theft or fraud linked to the breach. “Unfortunately, we have learned that a law firm that we work with, Thompson Coburn LLP, experienced a data security incident involving the protected health information of certain Presbyterian patients,” Schoenberg noted. The law firm further indicated that the specific types of information exposed vary by individual, and details were outlined in personalized notifications mailed to those impacted.

Thompson Coburn, which provides counsel to Presbyterian on legal matters such as government billing and repayment, initiated an investigation in collaboration with third-party forensic experts immediately after the breach was detected. In a press release, the firm stressed that affected individuals should monitor financial statements, credit reports, and healthcare benefit explanations to catch any unusual activity.

The incident adds to recent cybersecurity threats affecting healthcare-related businesses across New Mexico. Lovelace Health System experienced disruptions last year due to a ransomware attack on its parent company, Ardent Health Services, which led to emergency room diversions and surgery rescheduling. Other breaches include one in 2023 affecting Blue Cross and Blue Shield of New Mexico, which exposed Social Security numbers and banking information, and a 2022 breach at First Choice Community Healthcare that impacted patient records.