Martha Smith-Lightfoot was suspended for 12 months, effective April 10. She has also been ordered 12 months stayed suspension and two years probation upon her return to practice.
Around April 15, 2015, Ms. Smith-Lightfoot shared spreadsheets containing personally identifiable information of about 3,000 patients to another health provider, according to a consent order she signed in November 2017. The breach resulted in URMC being fined $15,000.
URMC learned of the breach only after patients told the hospital they’d received letters from Greater Rochester Neurology, Ms. Smith-Lightfoot’s new employer. Ms. Smith-Lightfoot said she planned to use the spreadsheets to ensure continuity of care for her URMC patients, but she was not given permission by URMC or the patients to share the information.
A Greater Rochester Neurology staff member told Democrat & Chronicle Ms. Smith-Lightfoot hasn’t worked at the clinic for some time and an attempt to reach Ms. Smith-Lightfoot was unsuccessful, the report states.
In December 2015, the New York attorney general levied the fine against URMC, at which time the Education Department declined to confirm or deny whether it was investigating Ms. Smith-Lightfoot.
More articles on cybersecurity:
Former IBM security exec joins Protenus as CFO: 3 things to know
Congressional leaders to HHS: It’s unclear if troubled cybersecurity center ‘still exists’
Cybersecurity problems plague healthcare M&A: 7 report insights
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.