On Dec. 19, an individual called the Sentara Compliance Hotline to notify the hospital of the uploaded report. The hospital then visited the site and confirmed that the PDF was from its Sentara’s lab services, according to a breach notification from Sentara.
According to the hospital, the PDF was uploaded on Oct. 17 by an individual who was an employee of its medical billing vendor Coronis Health.
On Dec. 20, Coronis Health removed the file from the Adobe site, fired the employee and began retraining employees on how to handle protected health information.
The report contained the protected health information of 741 patients.
Some of the information in the report included patients’ names, Medicare ID numbers, dates of service, Current Procedural Terminology codes, the last four digits of their account numbers, the location of service and any outstanding balances on their accounts.
Sentara said it is notifying all affected individuals.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.