Hospital Data Breach Affects 135,000

Former employee saved private data to personal folders and uploaded files to a public website

By Dan Hounsell


Healthcare IT managers are being reminded on a regular basis that despite their best efforts to protect patient information from cyber attacks, the real threat often is inside the organization. 

At least five healthcare organizations have confirmed they were affected in a data breach by revenue cycle and patient billing vendor Med-Data. The vendor discovered the breach when an independent journalist contacted Med-Data about patients' personal health information being published online, according to Becker’s Hospital Review.

An investigation concluded that a former employee saved PHI to personal folders and uploaded the files to a public website. At least five health systems and hospitals were affected by the breach. The data breach portal for the U.S. Department of Health and Human Services reported 135,908 individuals have been affected.



April 28, 2021


Topic Area: Information Technology


Recent Posts

ISSA Introduces Healthcare Platform to Advance Safer, Cleaner Patient Environments

This new resource integrates training, research and cross-sector collaboration to raise care standards and improve patient outcomes.


Third-Party Tracking Settlement is a Compliance Wake-Up Call for Healthcare Facilities Managers

Mount Sinai Health System agrees to a $5.3 million settlement to resolve claims it improperly shared patient data with Facebook through tracking tools.


ECU Health Behavioral Health Hospital Hosts Ribbon-Cutting Ceremony for New Facility

The new facility features 144 beds and a healing environment for behavioral health patients.


Aspire Rural Health System Reports Data Security Incident

Upon detecting the unauthorized activity, Aspire immediately worked to contain the incident and launched a thorough investigation.


Fatal Flaws: Strategies for Active Attackers

Anything that goes wrong with the response is the liability exposure of the organization — not the employee and not the police.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.