The USB was stolen during a burglary of an OHSU employee’s home around July 4. According to the release, the employee accidently took the thumb drive home in a briefcase at the end of the day.
According to the release, the patient information on the USB drive includes names, dates of birth, phone numbers, addresses, OHSU medical record numbers and descriptions of patients’ medical conditions. The staff information on the USB includes names, Social Security numbers, addresses and employment-related vaccination information.
The drive was used to back up data and is normally locked in a secure location on campus, according to the release. In addition, OHSU has measures in place to protect patient information, including encryption software, password protections and secure programs. However, the organization is developing additional methods to ensure USB drives are encrypted, according to the release.
More Articles on Data Breaches:
Laptop Theft Affects Nearly 4k Beth Israel Deaconess Medical Center Patients
7 Hospital Data Breaches
Data Breach at MD Anderson Cancer Center May Affect 30k Patients