DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Santa Barbara Public Health Notifying Patients After Employee Accessed Records Without Authorization

Posted on December 3, 2015 by Dissent

Gina Pothoff reports:

Some 260 patients with records in the Santa Barbara County Public Health Department will receive notification letters explaining that a Health Care Center employee illegally accessed their personal health information.

The department announced the unauthorized data breach Wednesday, saying a staff member accessed electronic information for an unapproved academic research project.

Read more on NoozHawk.

The health department issued the following press release yesterday:

The Santa Barbara County Public Health Department has experienced unauthorized access to 260 patient records by a Health Care Center staff member. “The Public Health Department deeply regrets this incident,” said Dr. Takashi Wada, Director of the Department.

Immediately upon learning about the unauthorized access, the Public Health Department initiated an investigation. The investigation revealed that a Health Care Center staff member accessed electronic information for an unapproved academic data research project. “At this point in the investigation, we have no reason to believe any identifying information has been shared outside of our department,” Dr. Wada added. The staff member in this incident has been denied access to any additional patient information.

The Public Health Department is cooperating with the State Department of Health Care Services. Notification letters have been sent to those whose information was inappropriately accessed. Depending upon the nature of each case, credit monitoring has been offered to patients in accordance with the regulations. Unless further information becomes available, no further action by the Public Health Department or the State is anticipated.

“Privacy and security are a priority at the Public Health Department,” noted Dr. Wada. Training has been provided to all staff, high standards are modeled with regard to the confidentiality of personal information and action is taken immediately upon learning of such incidents. As a result of this incident, all Health Care Center staff are being re-trained.


Related:

  • Protected health information of 462,000 members of Blue Cross Blue Shield of Montana involved in Conduent data breach
  • TX: Kaufman County Faces Cybersecurity Attack: Courthouse Computer Operations Disrupted
  • Attorney General James Announces Settlement with Wojeski & Company Accounting Firm
  • JFL Lost Up to $800,000 Weekly After Cyberattack, CEO Says No Patient or Staff Data Was Compromised
  • Before Their Telegram Channel Was Banned Again, ScatteredLAPSUS$Hunters Dropped Files Doxing Government Employees (2)
  • Massachusetts hospitals Heywood, Athol say outage was a cybersecurity incident
Category: Health DataInsiderU.S.

Post navigation

← Cottage Health Notifying 11,000 Patients Whose Records Were Exposed
After asking bank for $3 million ransom, hacker dumps massive customer financial database →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Report released on PowerSchool cyber attack
  • Sue The Hackers – Google Sues Over Phishing as a Service
  • Princeton University Data Breach Impacts Alumni, Students, Employees
  • Eurofiber admits crooks swiped data from French unit after cyberattack
  • Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill
  • French agency Pajemploi reports data breach affecting 1.2M people
  • From bad to worse: Doctor Alliance hacked again by same threat actor (1)
  • Surveillance tech provider Protei was hacked, its data stolen, and its website defaced
  • Checkout.com Discloses Data Breach After Extortion Attempt
  • Washington Post hack exposes personal data of John Bolton, almost 10,000 others

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • CIPL Publishes Discussion Paper Comparing U.S. State Privacy Law Definitions of Personal Data and Sensitive Data
  • India’s Digital Personal Data Protection Act 2023 brought into force
  • Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill
  • Keeping Cool When ICE Arrives: Basic Raid Response Strategies for Laboratories
  • IRS Accessed Massive Database of Americans Flights Without a Warrant

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.