Three unencrypted computer backup tapes containing patient billing and employee payroll data and the locked cabinet they were stored in were reported missing from a Nemours facility in Wilmington, Del., on Sept. 8 and are believed to have been removed around Aug. 10 during a facility remodeling project.
The information stored on the tapes dates from 1994-2004 and includes names, addresses, dates of birth, Social Security numbers, insurance information, medical treatment information and direct deposit bank account information.
While there is no evidence the tapes were stolen or the information was accessed or misused, Nemours is offering affected individuals one year of free credit monitoring and identity theft protection and call center support. Nemours is also encrypting all computer backup tapes and moving non-essential computer backup tapes to a secure off-site storage facility.
Related Articles on Data Breaches:
10 Best Practices for Securing Protected Health Information
Hundreds of Medical Records Found Dumped Behind Vacant Building
Stanford Hospital & Clinics Faces $20M Lawsuit for Data Breach