For the second time this week, we learn that a departing employee took information to their new job. First it was the Jacobi Medical Center case, where the employee’s motives were reportedly innocent: she wanted the information in case she ever had to follow-up on work she had done. Now it’s the University of Rochester Medical Center, where…
Category: Health Data
Healthcare hackers may have accessed lawmaker info
From the now-that-it’s-hit-home-maybe-they’ll-care? dept.: Lauren French reports: House lawmakers were warned Thursday night that their personal data may have been compromised in a cyber-attack involving healthcare plans from CareFirst Blue Cross Blue Shield. Read more on Politico.
Medical Management LLC’s insider breach impacts patients of 40 providers (Update2)
Update: NorthJersey.com reports that the “Medical Management LLC” involved in this breach is based in North Carolina. One rogue employee at Medical Management LLC is resulting in 40 of the billing company’s clients having to notify patients. Medical Management is handling the notifications (template), but even so, this is not the way hospitals want to be in…
Epic played no part in Coast Guard health-data privacy shortcomings
Mark Sullivan reports: A new report from the Department of Homeland Security’s Office of Inspector General (OIG) says that the U.S. Coast Guard holds plenty of personally identifiable health information in its servers but lacks a strong approach to dealing with privacy issues. The report grew from a DHS audit that focused on practices and procedures for…
Former program director of Louisiana Health and Rehabilitation Options indicted on health care fraud, identify theft
Quincy Hodges reports: A former Louisiana Health and Rehabilitation Options program director was indicted on multiple charges of health care fraud and aggravated identity theft, U.S. Attorney Walt Green said in a news release on Tuesday. A federal grand jury returned an indictment charging 49-year-old Shanta Barnes, of Baton Rouge, with obtaining oxycodone by fraud,…
CareFirst BlueCross BlueShield discloses that hack in June 2014 affected 1.1 million members
From CareFirst BlueCross BlueShield: On May 20, 2015, CareFirst BlueCross BlueShield (CareFirst) announced that the company has been the target of a sophisticated cyberattack. The attackers gained limited, unauthorized access to a single CareFirst database. This was discovered as a part of the company’s ongoing Information Technology (IT) security efforts in the wake of…