Amazon One Medical reported a security event that affected a “limited number” of patients in its senior care clinic business.
On June 13, One Medical learned that an unauthorized person had accessed a third-party file storage system used to maintain archival information for Iora Health, a company One Medical acquired in 2021, One Medical confirmed to Fierce Healthcare in a statement. Iora Health rebranded in 2023 and now operates as One Medical Senior Health.
The company did not disclose how many One Medical Senior patients were affected or the total number of patients the senior care clinic currently serves.
“We immediately took steps to disable the system and revoke all access,” One Medical said in a statement, adding that it had launched a thorough investigation.
The primary care provider said its investigation revealed that certain patient files related to “a limited number of One Medical Seniors and traditional Iola Health patients” were accessed.
One Medical said in a statement that no other One Medical patients were affected by the security event.
“This event was limited to third-party file storage systems; no other One Medical or Amazon systems were affected,” the company said.
One Medical said it is directly notifying affected patients. One Medical said in a statement: “We take the security of patient information seriously and have put in place additional safeguards to prevent similar incidents from occurring in the future.”
One Medical, a technology-enabled primary care provider, acquired Iora Health, a primary care company focused on Medicare patients, in June 2021 in a $2.1 billion deal. In July 2021, Iora cared for a total of approximately 39,000 patients across 46 geriatric clinics.
A year later, in 2022, Amazon announced plans to acquire One Medical for $3.9 billion to grow its healthcare business. The transaction, which included Iora Health, closed in February 2023.
