The employee was reportedly attending a conference in Portland in November when the laptop was stolen from the locked car. The laptop was the employee’s personal laptop and had not been evaluated or approved for use by Corvallis Clinic’s IT security officer, according to the clinic’s notice.
While the laptop was password-protected, it was not encrypted. The clinic indicates a patient data breach is “unlikely.”
Patient health information stored in spreadsheets on the computer likely contained patient names, birth dates, name of healthcare provider and the reason for the visit. The clinic does not believe Social Security numbers or financial information were stored on the computer.
More articles on data breaches:
Tribeca Medical Center reports data breach due to stolen records
Target ruled negligent for massive holiday data breach: What does this mean for data breach precedent?
WellCare reports data breach caused by coding error
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.