Software vendor shares information about data breach

Aurora, Colo. (September 15, 2023) – UCHealth was recently informed by Nuance Communications, Inc., a software company that provides services to securely exchange files related to clinical documentation, that one of its vendor’s software products was potentially accessed by an unauthorized third party. The unknown individual or group accessed files within MOVEit Transfer, the file exchange product.

Nuance investigated the incident and informed UCHealth that the data that was potentially inappropriately accessed may have included information for almost 13,000 patients. This information could include patients’ names, medical record numbers, dates of services, date of birth, or physician’s name. Social Security numbers and financial information were not included in the records that were potentially accessed.

Importantly, UCHealth’s systems, including its electronic medical record, were not impacted by this incident.

UCHealth values its patients, employees and providers, and protecting their data is a top priority. Though we have no reason to believe the data accessed from Nuance’s system was misused in any way, we are sharing this security incident so individuals may protect themselves by watching for any suspicious activity or possible identity theft. Individuals who may be involved are being notified per state and federal reporting requirements.

We apologize for the concern and inconvenience the Nuance data breach may cause, and we are committed to safeguarding our patients’ information.

Nuance and their software products have already taken additional steps to protect data and prevent this type of attack from happening again.

Individuals can get information on protecting themselves from the notice potentially involved individuals receive in the mail, from the Federal Trade Commission, by visiting the Colorado Attorney General’s Stop Fraud website, or by calling 877.ID-THEFT (877.438.4338). National credit reporting agencies can be contacted at:

About UCHealth

UCHealth is an innovative, nonprofit health system that delivers the highest quality medical care with an excellent patient experience. UCHealth includes 30,000 employees, 12 acute-care hospitals and hundreds of physicians across Colorado, southern Wyoming and western Nebraska. With University of Colorado Hospital on the CU Anschutz Medical Campus as its academic anchor and the only adult academic medical center in the region, UCHealth is dedicated to providing unmatched patient care in the Rocky Mountain West. Offering more than 150 clinic locations, UCHealth provides extensive community benefits and pushes the boundaries of medicine through advanced treatments and clinical trials, improving health through innovation.