Mosaic Medical is notifying patients of a breach after an office burglary, even though they have no evidence anything was actually stolen.
Here is their statement, as posted by KTVZ:
On the morning of Thursday, January 15, 2015 we discovered that an overnight break-in had occurred at the Health Information Technology (HIT) department. At the time the department was located in a temporary administrative office in Bend.
There was nothing stolen from the office, and there was no breach of our electronic medical records system. There is no evidence that anything in the office was disturbed.
However, we cannot say with certainty that no medical records were accessed. The personal information that was possibly accessed was on paper documents within the office and included health information, medical insurance information, phone number, and e-mail addresses. A report was filed with the Bend Police Department and they have investigated the break-in.
Mosaic Medical has notified all affected patients via first class mail and has encouraged those patients to monitor their credit report periodically.
As a result of the possible breach, Mosaic Medical has taken steps to further improve the security of its operations and eliminate future risk, including moving our HIT department to a more secure office space.
Mosaic Medical has trained staff available for patients to call with any questions related to this possible breach. Patients may call 1-844-625-6997 between 8:00 AM and 5:00 PM or send an e-mail to [email protected].
“We understand the importance of safeguarding our patients’ personal information and take that responsibility very seriously,” said Mosaic Medical Chief Operating Officer, Allison McCormick. She continues, “We will do all we can to work with our patients whose personal information may have been compromised. We regret that this incident occurred, and we are committed to preventing future occurrences”.
According to their notification to HHS, 2,207 patients were notified.