Officials at the University of Pennsylvania Health System have notified 661 patients about a data breach that occurred when receipts from Penn Medicine Rittenhouse containing personal health data were stolen last month , the Philadelphia Inquirer reports . Last week , the health system announced that the receipts had been taken from a locked office . The receipts included patients : Dates of birth ; Names ; and The last four digits of their credit card numbers . Susan Phillips , a senior vice president at the health system , said that there had been no arrests and no reported incidents of identity theft related to the incident , which she described as very low risk . She added that the health system is reviewing internal procedures to make any needed changes to keep patient information confidential ( Burling , Philadelphia Inquirer , 7/18 ) . ;