University of Washington School of Medicine (UW Medicine) officials are alerting roughly 90,000 patients that their personal data was compromised in an October security breach. Early last month, a UW Medicine employee opened an e-mail attachment that contained malicious software. The malware took control of the computer, which happened to be storing personal information from approximately 90,000 UW Medicine and Harborview Medical Center patients, according to a UW Medicine news release.

The compromised patient data included names, phone numbers, addresses, medical record numbers and social security numbers, among other information. UW Medicine is now reaching out to the affected patients and has also set up a call centre to work with victims.

Recently, Susan Phillips received a letter informing her of the data breach. She was a patient 10 years ago, but her last interaction with the hospital was in 2008. “I opened it up and I read this and I just got furious,” she said. “I don’t have a word for it right now.”

UW Medicine apologised for the breach and announced plans to implement a new “review, training and outreach effort. UW Medicine is committed to providing quality care and protecting patients’ personal information, and sincerely apologises for the inconvenience and concern this may be for affected patients,” the statement reads.

UW officials referred the matter to the Federal Bureau of Investigation, which is now investigating.