Just stumbled across these while searching for something else and I don’t recall ever seeing them before – from UF’s web site: UF Beaches Women’s Health Specialists Lab Tests Inadvertently Sent to Baptist Medical Center Published: July 15th, 2013 The University of Florida (UF) is notifying 142 patients of the University of Florida Beaches Women’s Health…
Category: Health Data
NC DHHS: Almost 49,000 Medicaid cards with children's personal information mailed incorrectly (update 1)
Michael Biesecker of AP reports: North Carolina health officials said Friday that they had inadvertently disclosed the personal information of tens of thousands of children receiving Medicaid coverage, but were tight-lipped about precisely what caused the massive privacy breach. The state Department of Health and Human Services issued a written release saying that new Medicaid…
University of Pennsylvania Health System says approximately 1,000 patients' privacy was compromised by printing error at RevSpring
Marie McCullogh reports that a printing error by vendor RevSpring, exposed approximately 500 University of Pennsylvania Health System patients’ names, type of services and tests, and amount owed to other patients: One of Penn’s billing vendors, RevSpring of Wixom, Mich., had a malfunction in its printing operation. As a result, some patients received bills containing both…
Lawsuit against Omnicell dismissed
I’ve blogged about the Omnicell breach of November 2012 a number of times on this blog as new information emerged about who was affected by the breach. As a quick reminder, a laptop with unencrypted PHI was stolen from an employee’s car. Omnicell is a business associate of numerous hospitals, providing them with medication dispensing/pharmacy…
In which I remind HHS of Einstein's point…
In a HealthcareITNews article on a recent breach, Erin McCann included this eye-catching statement: Out of the more than 80,000 HIPAA breach cases OCR has received since 2003, only 17 of them have resulted in fines thus far. To paraphrase Einstein, HHS might do well to remember that if they keep doing what they’ve always done,…
Accretive Health Settles FTC Charges That It Failed to Adequately Protect Consumers’ Personal Information
From the FTC, a follow-up on a breach that was first disclosed in September 2011, and that I’ve covered a number of times on PHIprivacy.net (see these articles). Regular readers may recall that Accretive was also sued by Minnesota’s Attorney General. That suit settled for $2.5 million in July 2012. Accretive Health, Inc., a company that…