On October 25, two USBs used to transfer electronic information to a computer form a Fibroscan machine that evaluates liver disease went missing. The hospital cannot determine whether the data on the USBs has been accessed or viewed by a third party.
Patient first and last names, birthdate, gender, diagnosis, date and time of the examination, numbers and images associated with the test results and — in some cases — the name of the referring physician were contained on the USBs. No addresses, phone numbers, Social Security numbers or any financial information were included.
“We care deeply for our patients’ wellbeing and their quality of life,”the letter sent to affect individuals read. “UAB Medicine takes the protection of our patients’ PHI very seriously and sincerely regrets this possible exposure. We conducted an extensive search for the USB sticks and continue to investigate the incident. We have implemented measures to prevent a similar breach in the future and will continue to evaluate our operations.”
The hospital said the risk of any potential harm is low because of the limited data involved. However, officials have provided affected individuals one year of free credit monitoring and reporting services.
More articles on cybersecurity:
Lawmakers introduce stronger data breach notification law
12 healthcare privacy incidents in November
Federal government considers digital currency
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit