Indiana Medical Clinic and Long Beach Health Plan Report Data Security Incidents | Healthcare Informatics Magazine | Health IT | Information Technology Skip to content Skip to navigation

Indiana Medical Clinic and Long Beach Health Plan Report Data Security Incidents

August 29, 2016
by Heather Landi
| Reprints

Orleans Medical Clinic located in southern Indiana reported that it was recently the victim of a hacking incident of its network server resulting in inappropriate access to the protected health information about 6,800 patients.

In a separate incident, Scan Health Plan, a health insurance company based in Long Beach, California, reported a data privacy incident on its website that resulted in unauthorized access to patient information.

In the Orleans Medical Clinic incident, a breach report filed with the U.S. Department of Health and Human Services Office for Civil Rights (OCR) and publicly reported on the OCR’s breach portal indicated that 6,890 individuals were potentially affected by the server hacking incident. A notice posted on the medical practice’s website reported that on or about April 17, 2016, the clinic became aware of suspicious activity involving one of its computer servers. The clinic initiated an investigation and learned that its computer server that contained electronic health record data had been left unsecured after the server was upgraded.

“As a result, computer hackers gained access to the server over a period of time from April 5, 2016 until April 17, 2016. On July 21, 2016, we received confirmation of the individuals and information potentially affected by the breach,” according to a statement from the practice.

The practice stated that its investigation did not definitively conclude whether the hackers actually accessed or obtained a particular individual’s information. “It would have been possible for the hackers to access and obtain patient information about all of our current and former patients, including medical records and demographic information such as date of birth and social security number,” the practice stated.

Orleans Medical Clinic is offering all 6,890 patients one year of identity theft protection at no cost to patients through Equifax Personal Solutions.

Scan Health Plan posted a notice on its website stating that it is working with AllClear ID, an identity protection provider, to offer a year of identity protection services to plan members impacted by the data security incident.

On June 27, 2016, Scan Health Plan learned a person without authorization accessed contact sheets kept in a system used for sales purposes. “We immediately began an investigation and brought in outside experts. We determined the unauthorized access occurred between March and June 2016,” the health plan stated in it is notice. Scan Health also stated that there is no indication that the information in this system has been used fraudulently.

According to an article in the Long Beach Press Telegram, Scan Health Plan has about 170,000 members.

“The information on the contact sheets that were exposed included name, address, and phone number. For some people it also included date of birth and limited health notes, such as a doctor name, health condition, or medication name. For a small number of individuals it may have also included social security number,” the health plan stated.

Get the latest information on Health IT and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More

Topics

News

ONC Roundup: Senior Leadership Changes Spark Questions

The Office of the National Coordinator for Health IT (ONC) has continued to experience changes within its upper leadership, leading some folks to again ponder what the health IT agency’s role will be moving forward.

Media Report: Walmart Hires Former Humana Executive to Run Health Unit

Reigniting speculation that Walmart and insurer Humana are exploring ways to forge a closer partnership, Walmart Inc. has hired a Humana veteran to run its health care business, according to a report from Bloomberg.

Value-Based Care Shift Has Halted, Study Finds

A new study of 451 physicians and health plan executives suggests that progress toward value-based care has stalled. In fact, it may have even taken a step backward over the past year, the research revealed.

Study: EHRs Tied with Lower Hospital Mortality, But Only After Systems Have Matured

Over the past decade, there has been significant national investment in electronic health record (EHR) systems at U.S. hospitals, which was expected to result in improved quality and efficiency of care. However, evidence linking EHR adoption to better care is mixed, according to medical researchers.

Nursing Notes Can Help Predict ICU Survival, Study Finds

Researchers at the University of Waterloo in Ontario have found that sentiments in healthcare providers’ nursing notes can be good indicators of whether intensive care unit (ICU) patients will survive.

Health Catalyst Completes Acquisition of HIE Technology Company Medicity

Salt Lake City-based Health Catalyst, a data analytics company, has completed its acquisition of Medicity, a developer of health information exchange (HIE) technology, and the deal adds data exchange capabilities to Health Catalyst’s data, analytics and decision support solutions.