The information on the sheet included patients’ full names, identification numbers, photos, unit room numbers, names of treatment team members, legal status and vitals, according to the notification letter. The hospital did not release the psychiatrist’s name and maintains that patient data was not misused, according to a report from The Statesman Journal.
The psychiatrist reported the incident, and the hospital asked the six people who received the medical data to confirm they deleted the photo. It is unclear whether the six people are affiliated with the hospital.
OSH policy currently allows staff to use cell phones while working, but requires they receive permission before removing any information from the hospital. The psychiatrist has been retrained on the hospital’s information privacy policy, according to a spokesperson.
More articles on data breaches:
$65M in bitcoin stolen in hack of virtual currency’s exchange
Banner Health suffers year’s largest data breach; 3.7M affected
Advocate to pay largest HIPAA settlement to date