The BNY Mellon breach apparently affected patient account info, as well. The incident occurred in April, and letters first went out this month.
Eileen Smith of the Courier-Post reports:
People who have made payments to the University of Pennsylvania Health System have been notified that tapes containing personal information about their accounts have gone missing.
Letters issued by Penn and the Pittsburgh-based Bank of New York Mellon said an encrypted backup tape was lost while it was being transported by an outside carrier. The tapes contained personal information, including names, addresses and checking account numbers.
More – CourierPostOnline.com