Although not named in South Shore Hospital’s press release about a lost shipment of back-up files slated for destruction, the data management firm was named in the hospital’s report to the U.S. Department of Health & Human Services. It’s Iron Mountain Data Products (but see correspondence below from Iron Mountain that it was not them or any affiliate or subsidiary).
Update: see comments below and in response to . I’m trying to get confirmation or clarification from OCR/HHS.
Update 2: Received from Iron Mountain:
Iron Mountain Data Products is NOT a subsidiary of Iron Mountain. Iron Mountain Data Products previously licensed the “Iron Mountain” name for the sale of computer back-up tapes, tape containers and other commodity data products, not services apparently related to the South Shore Hospital tape loss. The company now goes by Archive Data Solutions, www.archivedata.com. As part of this previous licensing agreement, we created this page to refer customers to Iron Mountain Data Products–now Archive Data Solutions. Again, Iron Mountain Incorporated and its affiliates were not involved with this incident.
Hi, I’m a communications guy with Iron Mountain–not to be confused here with Iron Mountain Data Products. Iron Mountain Data Products is a different company and not affiliated with Iron Mountain, the information management company. Just wanted to clear up any confusion. Thanks.
Check your email, Dan. It’s not clear to me why you say there’s no affiliation. But more to the point, a colleague of yours subsequently posted something to phiprivacy.net that it’s a totally different firm that was involved in the incident. I have contacted OCR/HHS to ask them to confirm what their records for this breach show.