Personal data of more than 36,000 UPMC patients may have been inappropriately accessed through an information security breach at the law firm of Oakmont, Pa.-based Charles J. Hilton & Associates, according to a news release Friday. 

The company provides billing-related legal services to UPMC. The breach did not occur at UPMC. The security of electronic patient records and other computer systems at UPMC were not compromised.

Officials from the law firm say an investigation in July 2020 determined that a number of their employee email accounts had been accessed by hackers between April 1, 2020 and June 25, 2020. Computer forensics specialists confirmed that some of UPMC's patient information may have been accessed during the breach. 

According to the investigation, the data included social security numbers, financial information and medical record information. 

The company says there is no evidence any data obtained in the breach was misused. However, the law firm and UPMC are alerting affected patients through personal letters and public notification. 

Charles J. Hilton & Associates has established a hotline for people to call with questions and concerns. It can be reached at 1-888-724-0238. 

Additionally, the company is offering free credit monitoring and identity protection services to all impacted patients.