Middlesex Hospital said the personal information of more than 900 patients could be at risk after an employee fell victim to a email "phishing" scam.
Eyewitness News has learned that information may contain names, addresses, as well as medication, dates of service, and any diagnosis from a doctor at the hospital.
However, hospital officials said security numbers were not compromised.
All patients involved have been notified.
Copyright 2015 WFSB (Meredith Corporation). All rights reserved.