Four things to know:
1. Geisinger discovered on March 20 that an employee had accessed patient records from July 2017 to March 2020 without a business need.
2. The employee had access to medical records as part of their daily job, but also accessed around 800 patients’ records unnecessarily, an investigation confirmed.
3. While the investigators have not found evidence that the employee used the information for malicious purposes, that employee did have access to patient names, birth dates, Social Security numbers, medications and diagnoses.
4. After conducting the investigation, Geisinger reported that the individual is no longer employed at the health system.
More articles on cybersecurity:
‘Secret’ is out, and 24 other passwords to avoid
Minnesota health system email attack exposes 10,000+ patients’ info: 4 details
Human error accounts for nearly one-third of healthcare data breaches
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.