DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Data loss and medical privacy: In the aftermath of a tornado

Posted on May 28, 2011 by Dissent

Tragically, the tornado that recently hit Joplin, Missouri took lives as well as destroying most of the city. As the state and the medical community scrambled to respond to the tragedy and to  provide care, the country has watched, prayed, and tried to support and help those who have been affected.

But in the aftermath of the devastation, one additional worrying problem – although it may be the least of some people’s problems – is that medical records were scattered far and wide.

The destruction of medical records or their dissemination beyond intended sharing poses unique challenges and threats to the residents of Joplin.  For patients of Mercy St. John’s Regional Medical Center, their information is safe as it is on computerized systems at a data center. For these patients, the threats are to their privacy as the details of their health wind up in strangers’ hands.  There is also a risk of identity theft if detailed records fall into the wrong hands, although at this point, I think the privacy concern may be a bigger issue. Patients at other facilities or offices may not be so lucky and there may  be a risk that their treatment is affected if their medical histories are not available.

What To Do If You Find Records (press release from Mercy St. John’s Regional Medical Center)

In response to reports of medical records and other patient information that have been found following the tornado that struck Joplin, Mo., on May 22, Mercy/St. John’s Regional Medical Center has established a process for retrieval of these documents. If you have medical records in your possession that were lost in the tornado, please follow these instructions:

Please determine if there is any information on the document that can link it to a specific person. Information that can link the record to a specific person includes: name, address, date of birth, medical record number, social security number, address, phone number or a combination of these. If there is no information that could link the record to specific person, please destroy the record by shredding, cutting into small pieces and disposing of the pieces, or burning.

If the medical record does contain information that can link it to a specific person, please follow these instructions:

If you are close enough, please return it to the Mercy/St. John’s command center at the Holiday Inn Convention Center, 3615 Range Line Road, Joplin, Mo., or

Send by regular US mail to the following address:
Attention: Privacy Department
St. John’s Hospital
1235 East Cherokee Street
Springfield, MO 65804

If you would like reimbursement for postage, please let us know by including a note with the record and the address where we should send the reimbursement.

Lisa Olliges of KOAM in Joplin reports on the situation at Sacred Rose Health Care:

The record room of the Sacred Rose Health Care is in the center of a mound of rubble.

Searching now for current patient’s records, some of those are not found anywhere else. Other doctors, hospitals, and stuff have lost those records also, so they are very important to us and our patients for continuity of care.

For Sacred Rose Home Health Care, the search is on for these colored binders. The demographic stuff is on computer. These held information from nurses and their notes, unfortunately. What they’re finding is nothing inside.

Dr. Mike Knapps salvaged 7 truckloads of medications, equipment and charts at his office.

“We were able to salvage some but in the end, there’s so much water damage we probably won’t get much out of them. We’ll probably just be working from scratch.” – Dr. Knapp

Dr. Knapp says some information he can get from St. John’s and Freeman hospitals where records are stored electronically.

[…]

In time, we will see “lessons learned” articles from this tornado.  We may see more people creating personal health records and storing data online as a backup of their records.  But when all is said and done, some of this is just simple decency:  if  you find someone’s medical records, treat them as if you’ve been given a great responsibility and trust, and act accordingly.

Category: Uncategorized

Post navigation

← Sony Will Testify on PlayStation Hack; Hirai Letter Answers Questions
MA: Steps taken to mitigate Sandwich privacy breach →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Department of Justice says Berkeley Research Group data breach may have exposed information on diocesan sex abuse survivors
  • Masimo Manufacturing Facilities Hit by Cyberattack
  • Education giant Pearson hit by cyberattack exposing customer data
  • Star Health hacker claims sending bullets, threats to top executives: Reports
  • Nova Scotia Power hit by cyberattack, critical infrastructure targeted, no outages reported
  • Georgia hospital defeats data-tracking lawsuit
  • 60K BTC Wallets Tied to LockBit Ransomware Gang Leaked
  • UK: Legal Aid Agency hit by cyber security incident
  • Public notice for individuals affected by an information security breach in the Social Services, Health Care and Rescue Services Division of Helsinki
  • PowerSchool paid a hacker’s extortion demand, but now school district clients are being extorted anyway (3)

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Clothing Retailer, Todd Snyder, Inc., Settles CPPA Allegations Regarding California Consumer Privacy Act Violations
  • US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car
  • Google agrees to pay Texas $1.4 billion data privacy settlement
  • The App Store Freedom Act Compromises User Privacy To Punish Big Tech
  • Florida bill requiring encryption backdoors for social media accounts has failed
  • Apple Siri Eavesdropping Payout Deadline Confirmed—How To Make A Claim
  • Privacy matters to Canadians – Privacy Commissioner of Canada marks Privacy Awareness Week with release of latest survey results

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.