Over the past year, I’ve had the opportunity to talk to a number of people in different organizations who are concerned with insider breaches in the health care sector. One of those people is Kurt Long, CEO and Founder of FairWarning, a firm that provides patient privacy monitoring (privacy breach detection) systems. So, here’s a…
Category: Health Data
Gibson General Hospital notifies 29,000 patients after laptop stolen from an employee's home
Brad Conaway reports that Gibson General Hospital has mailed letters to 29,000 patients informing them that their name, address, Social Security number and/or clinical information may have been on a laptop stolen from an employee’s home on November 27. Unfortunately, as the hospital explains in its statement and FAQ, the hospital cannot determine with any…
Brigham and Women’s Hospital statement regarding the theft of a computer
I recently noted that HHS’s breach tool had revealed some breaches we hadn’t known about. One of them was from Brigham & Women’s Hospital in Massachusetts. I contacted them to request a copy of their statement or press release, and was told that because there were less than 500 patients affected in Massachusetts, they had…
Cabinet for Health and Family Services notifies 1,090 Medicaid patients after subcontractor's employee fell for a scam
Kentucky’s Cabinet for Health and Family Services (CHFS) has issued a statement disclosing a recent breach: The Cabinet for Health and Family Services (CHFS) is informing 1,090 Medicaid clients by letter of a computer security breach that may have resulted in the unintentional release of information held by Hewlett-Packard Enterprise Services (HP ES), the vendor…
HHS fines hospice $50,000 over laptop stolen from car
I was surprised to read this morning that Hospice of North Idaho had settled charges by HHS over a laptop stolen from an employee’s car in the summer of 2010. I was surprised, in part, because I was not aware of this incident at all as it had not appeared in HHS’s breach tool. Since…
Stolen health information affects 4,000 University of Michigan Health System patients (updated)
Updated to include statement from hospital under original story. The Detroit Free Press reports that an electronic device stolen from the car of an employee of Omnicell on November 14 contained data on 4,000 patients. The University of Michigan Health System learned of the incident on November 20 and will be notifying 4,000 patients from…