Pittsfield, Mass.-based BMC contracted with the vendor, Wilmington, Del.-based Ambucor Health Solutions, to provide remote monitoring for cardiac devices.
Earlier this year, Ambucor told BMC that an Ambucor employee emailed information on 41 BMC patients to his personal computer. Ambucor informed each of those 41 patients. But in September, Ambucor found the employee possessed two thumb drives containing information for 1,745 patients, including some of the initial 41.
Ambucor said the thumb drives contained patients’ names, dates of birth, addresses, phone numbers, testing data, ethnicity and identification numbers. They did not contain Social Security numbers, or financial, insurance, Medicaid and Medicare information.
Ambucor is notifying all affected patients and offering one year of identity protected services. If necessary, the company is also providing impacted patients with recovery services and $1 million identity theft insurance.
More articles on health IT:
Trump says Apple CEO Tim Cook called him after election despite tension
Gov. Charlie Baker unveils Massachusetts Digital Healthcare Council
UCSF, GE Healthcare leverage deep learning algorithms for clinician support
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.