Beacon Health notifies 1.2k patients after former employee views records without authorization

South Bend, Ind.-based Beacon Health System notified roughly 1,200 patients about a privacy breach after discovering a former employee accessed medical records without proper authorization.

Advertisement

Here are four things to know.

1. During an audit of employee access to medical records, Beacon determined an employee viewed patient records without authorization between March 2014 and March 2017. Beacon immediately launched an investigation with the assistance of a third-party forensic investigation firm.

“After an anomaly outside of Beacon’s routine monitoring was detected, upon further review, there was evidence that records other than those that were needed to complete this individual’s job duties were viewed,” a Beacon spokesperson told Becker’s Hospital Review via email.

2. There was indication of access to 1,239 records, according to the Beacon spokesperson. These records may have included patient names, Social Security numbers, diagnoses and health insurance coverage, among other information. The employee denied downloading or misusing any information.

3. The employee told Beacon they accessed records out of curiosity after patient emergency room visits. The investigation is ongoing, however, Beacon has not found evidence of information misuse.

“A third party forensic review validated that no information was electronically downloaded or transferred,” Beacon wrote. “Out of an abundance of caution, Beacon took the most conservative route to report the incident and notify those involved.”

4. Beacon will review employee training curriculum and implement new privacy procedures. The health system offered affected patients access to one year of free identity monitoring and identity restoration services through Experian.

Click here to view the full notification.

More articles on health IT:
VA OIG: Poor IT security puts VA’s financial info at risk
0 of 7 leading fitness trackers accurately measure calories, study finds
AI can identify at-risk sepsis patients, study find

At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.

Advertisement

Next Up in Health IT

Advertisement

Comments are closed.