Amazon One Medical reported a security event impacting a "limited number" of patients of its senior care clinics business.
On June 13, One Medical learned that an unauthorized person gained access to a third-party file storage system used to retain archived information of Iora Health, a company acquired by One Medical in 2021, One Medical confirmed to Fierce Healthcare in a statement. Iora Health was rebranded in 2023 and now operates as One Medical Senior Health.
The company did not disclose how many One Medical Seniors patients were impacted or how many total patients the senior care clinics currently serve.
One Medical said in its statement that it "immediately took action to deactivate the system and revoke all access" and launched a thorough investigation.
The primary care operator said its investigation determined that certain patient files related to a "limited number of One Medical Seniors, and legacy Iora Health, patients were accessed."
No other One Medical patients were impacted by the security event, the company in a statement.
"This event was isolated to the third-party file storage system, and no other One Medical or Amazon systems were impacted," the company said.
One Medical said it is notifying affected patients directly. "We take the security of patient information seriously and are implementing additional safeguards to prevent similar events in the future," One Medical said in its statement.
Tech-enabled primary care provider One Medical acquired Iora Health, a primary care company focused on Medicare patients, in a $2.1 billion deal in June 2021. In July 2021, Iora took care of approximately 39,000 total patients with 46 senior-focused clinics.
A year later, in 2022, Amazon revealed plans to buy One Medical for $3.9 billion to grow its healthcare business. That deal, which included Iora Health, closed in February 2023.