The investigation found some employees at two clinics had not been removing the labels from the specimen cups before discarding them, potentially since April 2011, according to the report. Patient information on the label includes patient names, birth dates, internal chart number, physician names and date of service. According to the report, removing and shredding the labels is company policy.
The provider does not believe anyone accessed the trash or the patient information and is retraining employees in proper protocol, according to the report.
More articles on data breaches:
5 recent data breaches
4 shortcomings of HIPAA in the era of reform
Mobile security: Why hospitals need to better protect data
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.