On July 25, the health system’s privacy office learned the employee had saved patient files to personal storage devices through external drives and emails, according to the notice. The information included such data as patient names, dates of birth, Social Security numbers, diagnoses and medical treatment.
Legacy Health said the incident affected “only a small percentage” of patients who had tests done in its lab. The health system started mailing letters to affected patients Nov. 23.
“We sincerely regret any concern this incident may cause,” the statement reads. “We addressed this issue in accordance with our disciplinary policies and the employee no longer works for Legacy Health. We also reported the incident to law enforcement and continue to work it.”
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.