On June 26, this site reported that a database with almost 397,000 patient records was up for sale on the dark net. I subsequently tentatively identified the entity as Athens Orthopedic Clinic in Georgia, but they never officially confirmed that it was their data, noting only that they were investigating and had only first found…
Category: Health Data
Texas physicians group notifies patients of unauthorized disclosure
It seems like a previously reported incident involved Dr. Mario Gross also impacted Premier Family Care I, Inc. in TX. They notified HHS on July 20 that 1,326 patients were affected. The notice was posted on Premier Physicians’ site. Premier Physicians Notifies Patients of Records Security Incident MIDLAND, TX – June 7, 2016 – Premier…
Woman sues Pennington County authorities for alleged violation of her civil rights
File this under “small breach, huge harm.” Mike Anderson reports that a woman is suing Pennington County because employees at City County Alcohol Drug Program (CCADP) violated federal law when they notified law enforcement that they had found a used syringe in her possession when she came to them, seeking help. Their notification appears taboo to me under…
Fired after NFL player’s medical chart leaked to ESPN, worker sues
There’s an update to the case involving the breach of Jason Pierre-Paul’s medical information. Daniel Chang reports: A secretary fired from Jackson Health System on grounds she breached the privacy of New York Giants’ player Jason Pierre-Paul’s medical records has sued Miami-Dade’s public hospital network, denying she accessed the private information and saying her former…
University of Mississippi Medical Center to pay $2.75M to settle HIPAA charges
The University of Mississippi Medical Center (UMMC) has agreed to settle multiple alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). OCR’s investigation of UMMC was triggered by a breach of unsecured electronic protected health information (“ePHI”) affecting approximately…
21st Century Oncology sued for $57M over data breach
Brian Amaral reported this at the beginning of the month. It involves a breach previously noted on this site: A network of California cancer centers is facing a $57 million lawsuit from a putative class of patients alleging the health care provider is responsible for carelessly handling their private information after a data breach. The…