There was no evidence the ex-staffer retained any of the information or attempted to misuse it, the hospital reported.
The viewing of medical records was outside the former staffer’s scope of duties and was reported by a former co-worker after the ex-employee transferred to a different department, according to a July 6 Cowboy State Daily story. The breached data included names, Social Security numbers, and diagnosis and treatment information.
The medical center plans to mail notification letters to about 1,600 affected individuals and has created an IT audit trail to see when and why employees are accessing records, the news outlet reported.
“We want our patients and community to know that their personal health information, as well as their privacy, are very important to us, and we are constantly working to strengthen our operational procedures,” Gladys Ayokosok, compliance and privacy officer for Cheyenne Regional Medical Center, said in a hospital news release. “We sincerely regret any inconvenience or concern this incident has caused and are committed to working with any individuals who may have questions or concerns.”
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.