The information involved may have included patients’ names and dates of birth, and demographic data such as addresses, health insurance information, health information, Social Security numbers, financial account information and/or credit card information. The unauthorized third-party access was "limited to the affected email accounts and did not impact medical record systems or patient care systems maintained by UNC Health Care. Information technology security teams continue to monitor relevant systems for unauthorized activity," says the UNC School of Medicine. 

For patients whose Social Security number was contained in the email accounts, UNC School of Medicine is offering complimentary credit monitoring and identity protection services for patients whose Social Security numbers were contained in the email accounts. 

In addition, UNC School of Medicine says it has implemented multi-factor authentication to increase security of its email accounts and enhanced employee education and training on phishing recognition and awareness to prevent another ransomware incident.