UCHealth realized it suffered a breach while performing a regular audit to ensure employee compliance with HIPAA.
“The employee was able to see patients’ names, addresses, phone numbers, dates of birth, insurance information and a description of the care and treatment received during a visit,” a news release reads. “However, the employee was not able to access Social Security numbers or other personal, financial information. There is no evidence at this time that the staff member shared this information with anyone else.”
The employee has since been fired and the system has initiated re-training for all of its staff, emphasizing the only records they can review are for patients to whom they are directly providing care.
More articles on health IT:
10 startups to know for 2016
The upside of EHRs: 3 physicians’ perspectives on what they get right
Are Epic and Cerner healthcare’s Apple and Android? 7 Core Thoughts