Indiana Medical Clinic and Long Beach Health Plan Report Data Security Incidents | Healthcare Informatics Magazine | Health IT | Information Technology Skip to content Skip to navigation

Indiana Medical Clinic and Long Beach Health Plan Report Data Security Incidents

August 29, 2016
by Heather Landi
| Reprints

Orleans Medical Clinic located in southern Indiana reported that it was recently the victim of a hacking incident of its network server resulting in inappropriate access to the protected health information about 6,800 patients.

In a separate incident, Scan Health Plan, a health insurance company based in Long Beach, California, reported a data privacy incident on its website that resulted in unauthorized access to patient information.

In the Orleans Medical Clinic incident, a breach report filed with the U.S. Department of Health and Human Services Office for Civil Rights (OCR) and publicly reported on the OCR’s breach portal indicated that 6,890 individuals were potentially affected by the server hacking incident. A notice posted on the medical practice’s website reported that on or about April 17, 2016, the clinic became aware of suspicious activity involving one of its computer servers. The clinic initiated an investigation and learned that its computer server that contained electronic health record data had been left unsecured after the server was upgraded.

“As a result, computer hackers gained access to the server over a period of time from April 5, 2016 until April 17, 2016. On July 21, 2016, we received confirmation of the individuals and information potentially affected by the breach,” according to a statement from the practice.

The practice stated that its investigation did not definitively conclude whether the hackers actually accessed or obtained a particular individual’s information. “It would have been possible for the hackers to access and obtain patient information about all of our current and former patients, including medical records and demographic information such as date of birth and social security number,” the practice stated.

Orleans Medical Clinic is offering all 6,890 patients one year of identity theft protection at no cost to patients through Equifax Personal Solutions.

Scan Health Plan posted a notice on its website stating that it is working with AllClear ID, an identity protection provider, to offer a year of identity protection services to plan members impacted by the data security incident.

On June 27, 2016, Scan Health Plan learned a person without authorization accessed contact sheets kept in a system used for sales purposes. “We immediately began an investigation and brought in outside experts. We determined the unauthorized access occurred between March and June 2016,” the health plan stated in it is notice. Scan Health also stated that there is no indication that the information in this system has been used fraudulently.

According to an article in the Long Beach Press Telegram, Scan Health Plan has about 170,000 members.

“The information on the contact sheets that were exposed included name, address, and phone number. For some people it also included date of birth and limited health notes, such as a doctor name, health condition, or medication name. For a small number of individuals it may have also included social security number,” the health plan stated.

Get the latest information on Cybersecurity and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More

Topics

News

HIMSS Names Hal Wolf as New President and CEO

The Chicago-based Healthcare Information and Management Systems Society (HIMSS) has named Harold “Hal” Wolf III as its new president and CEO, to succeed H. Stephen Lieber.

ONC Seeking Feedback on Common Agreement and Exchange Framework

On Monday, the Office of the National Coordinator for Health Information Technology (ONC) kicked off the first of three meetings and webinars to inform the public about the department’s work related to the implementation of the 21st Century Cures Act trusted exchange framework and common agreement provisions.

NIH Announces First Community Partners for All of Us Research Effort

The National Institutes of Health (NIH) announced its first four community partner awards to begin building a national network of recruiters for its All of Us Research Program, part of the Precision Medicine Initiative.

Survey: Clinicians Rate Biometric Devices as Most Effective Patient Engagement Tech

There are many technologies for engaging patients in their own care, but according to a survey of members of the NEJM Catalyst Insights Council, patient portals are not viewed as the most effective technology for patient engagement initiatives.

Pragmatic Clinical Trials Network to Focus on Genomic Medicine Interventions

The federal National Human Genome Research Institute has announced a five-year effort to conduct pragmatic clinical trials to measure the clinical utility and cost-effectiveness of genomic medicine interventions and assess approaches for real-world application of genomic medicine in diverse clinical settings.

Six State HIEs Now Participating in Patient Center Data Home Across the West

An HIE-to-HIE hub, known as the Patient Centered Data Home and spearheaded by SHIEC, is expanding across the West, with six states now connected and exchanging admission, discharge and transfer notifications for patients.