Centura Health's Mercy Family Medicine in Durango, Colo., is notifying patients of a potential health data breach. The patients were seen at the clinic between Aug. 1, 2012 and Oct. 3, 2012.
On June 21, Centura Health found a hard drive containing historical patient information had gone missing from Durango Family Medicine. The hard drive also included information related to patient visits during the time providers from Durango Family Medicine were transitioning to employment at Mercy Family Medicine.
The hard drive files specific to visits at Mercy Family Medicine are limited, but may contain personal information such as patient demographics and/or clinical information, including diagnosis, progress notes, medications, vital signs and consultation notes. The files do not contain financial information or social security numbers. There is no evidence the information on the hard drive was accessed or used.
Centura Health verified a police report had been filed requesting Durango Family Medicine return or destroy the files on their external hard drives that relate to visits at Mercy Family Medicine. Additionally, the health system plans on "improving internal processes related to provider employment transitions to ensure clear separation and retention of medical records."