Jupiter Medical alerts patients after third party data breach exposes health records

JUPITER, Fla. (CBS12) — A data breach at a third-party corporation has put Jupiter Medical Center patients on alert.

On January 14, Jupiter Medical Center received a notice bout an incident where a third-party electronic health record (EHR) vendor, Cerner Corporation, experienced a data breach. Jupiter Medical Center says, "The Cerner Corporation data security incident did not involve Jupiter Medical Center information systems. Jupiter Medical Center is making potentially affected individuals aware of the incident and steps that impacted individuals can take to protect their personal information."

A statement received by Jupiter Medical Center says:

“We received notification from Cerner, our former electronic health record vendor, regarding a cybersecurity incident involving historical data stored on Cerner servers. This incident affected several other health system clients as well.

It is important to note that Jupiter Medical Center computers were not impacted by this incident. The privacy and security of our patients’ health information are among our highest priorities. We view any compromise of patient data with the utmost seriousness and take every possible measure to protect our community and prevent future incidents. We remain committed to providing the highest quality, safety, and patient experience for all we serve.”

Jupiter Medical Center says that a third-party gained access to data that was being managed by the Cerner Corporation. The Cerner Corporation found that as early as January 22, 2025, an unauthorized party gained access to personal health information on legacy Cerner systems.

See also: Local fruit farmers face challenges as cold snaps threaten crops on Treasure Coast

Cerner Corporation told the hospital that law enforcement investigators notified patients and hospital customers the incident because doing so earlier could have impeded their investigation.

The investigation found on November 30, 2025, that the information involved in the Cerner Corporation data breach may have included protected patient information such as names, Social Security numbers and information included within patient medical records, such as medical record numbers, doctors, diagnoses, medicines, test results, images, care and treatment.

Cerner Corporation said that once it learned of the incident, it launched its incident response process, secured the affected systems with help from outside cybersecurity experts, and worked with federal law enforcement.

To help protect patients who may have been affected, Cerner Corporation is offering free services through Experian. These include identity protection and three-bureau credit monitoring for two years for those who choose to enroll. As an added precaution, Experian will also provide internet monitoring services.

Cerner has tried to notify affected individuals by mail with a letter that includes an engagement number and information. If you believe you were affected but did not receive a letter, please call 833-931-5355 .

For more information the incident, call the Cerner Corporation's incident response hotline at 1-833-931-5355, toll-free, Monday through Friday from 8 a.m. to 8 p.m.

Jupiter Medical Center sent letters to patients who were affected by the data breach.