NYC Health & Hospitals Corp. posted a notice this week (reproduced below) that suggests that a rogue employee may have been selling PHI to law firms or clinics that specialize in motor vehicle accident patients. Of note, this notice does not specify any one hospital where the employee worked. Did the employee have access to…
Category: Health Data
UK: NHS radiographer, 32, faces jail after illegally accessing more than 200 female patients’ personal records before hounding them for dates
Sophie Law reports: An NHS radiographer who illegally accessed the personal records of more than 200 female patients before pestering them for dates is facing jail. Andrew Stewart, 32, who worked at hospitals in Lanarkshire and Ayrshire, used his position to look up patient files of women he had been treating and made a note of their contact…
CO: Sunrise Community Health Notifies Patients of Data Security Incident
Sunrise Community Health in Colorado has posted a notice concerning a recent data security incident. From their notice: A recent incident at Sunrise Community Health (“Sunrise”) may affect the privacy of certain information. Sunrise is unaware of any actual or attempted misuse of this information. However, Sunrise is providing notification to individuals whose information was…
MN: Southeastern Minnesota Oral & Maxillofacial Surgery notifies 80,000 patients of ransomware incident
It’s gotten that there are so many ransomware incidents in the healthcare sector, that even tens of thousands of affected patients may not make headlines. One of the recent additions to HHS’s public breach tool involved the Southeastern Minnesota Oral & Maxillofacial Surgery of Minnesota. They reported that 80,000 patients were being notified. The following…
Kalispell hospital sued over data breach
Seaborn Larson reports: Kalispell Regional Healthcare, northwest Montana’s largest healthcare provider, was sued late last month by one of the 130,000 patients whose information was possibly compromised in a data breach announced by the hospital in October. William Henderson, represented by Billings attorney John Heenan, filed the civil complaint in Cascade County District Court on Nov. 25….
Fine against hospital due to data protection deficits in patient management
From the European Data Protection Board: The Commissioner for Data Protection and the Freedom of Information Rhineland-Palatinate imposed a fine of 105,000 euros on a hospital in Rhineland-Palatinate. The fine is based on several breaches of the General Data Protection Regulation in the framework of a patient mix-up when admitting the patient. This resulted in…