NC: High Point hospital system uncovers insider breach involving patient information

The following is a substitute notice from High Point Regional Health System published in the News & Record:

High Point Regional Health System officials said they uncovered a breach involving protected patient information.

Hospital representatives became aware early last month of “the possibility of improper use” of confidential information by a former employee of Premier Imaging LLC, a hospital subsidiary, according to the health system. The former employee, who was fired after the breach came to light, had access to patients’ names, addresses, dates of birth, Social Security numbers, driver’s license numbers and insurance information.

An investigation by the health system could not determine whether the former employee has any patient information in her possession or has used it in any way. Hospital officials declined to identify the former employee, who worked for Premier Imaging for about five weeks.

They contacted High Point police about the breach, which is believed to have occurred between Sept. 14 and Oct. 6. The former employee was fired after taking 47 patient files home, which were later returned, according to police Capt. Tony Hamrick. Officials said the former employee has provided no explanation for taking the files home.

Detectives conferred with prosecutors and determined that no crime had been committed. Hospital representatives said the breach was not brought to light by patients or anyone else outside the health system.

“We discovered it on our own and immediately took action on this employee,” said Tracie Blackmon, director of Public Relations & Marketing for the health system. “We feel confident we took the correct action once we found out about this, and that’s what’s most important — that our patients are taken care of and protected.”

The patient information at issue was obtained during the registration process at Premier Imaging, which provides mammograms, ultrasound, X-rays and related services in the Premier Medical Plaza facility off W. Wendover Avenue.

The health system is notifying the individuals whose information may have been acquired. The hospital is partnering with an identity protection service to assist patients with preventing and detecting identity fraud.

The health system has taken steps to prevent another breach, including a full review of the process of obtaining patient information at Premier Imaging.

“Premier Imaging has stringent policies, procedures and systems in place to protect patient information and takes very seriously our obligation to safeguard the personal and health information of our patients,” said Greg Taylor, chief operating officer. “We regret this incident has occurred and are committed to preventing future occurrences.”

Update: This incident was subsequently reported to HHS as affecting 551 patients.