Oregon Police will begin a criminal investigation into a breach of patient data at ProMedica's Bay Park Hospital.
The security breach, which was announced by ProMedica earlier this week, is suspected to have compromised personal health information for nearly 600 patients at the facility.
ProMedica said an internal investigation revealed a previous employee accessed records of patients that were not directly under the employee's treatment from April 1, 2013 to April 1, 2014.
The information accessed by the employee included each patient's full name, date of birth, diagnosis, attending physicians, and medications. Patients' Social Security numbers and financial information are not believed to have been accessed.
"ProMedica Bay Park Hospital deeply regrets this incident and is fully cooperating with federal and legal authorities," the health system said in a statement Friday. "There is no evidence that any financial information, including Social Security numbers, was accessed."
Oregon Police decided to pursue a criminal investigation after speaking with ProMedica officials.
"As legally required, ProMedica Bay Park Hospital reported the event to the Department of Health and Human Services," the ProMedica statement read. "ProMedica Bay Park Hospital intends to be transparent about the event as it has been thus far."