Thousands of medical records leaked in California
Compliance Monitor, February 22, 2012
A glitch in the network security settings of five California hospitals allowed outside search engines to potentially access the private health data of thousands of patients, the health system discovered earlier this month.
The St. Joseph Health System in Orange, CA, reported on its website that it learned February 8 that its hospitals accidentally made PHI accessible to disclosure by allowing outside search engines to access certain files on its internal computer network. The information relates to patients who may have received services between February 2011 and August 2011, according to a press release from St. Jude Medical Center in Fullerton, CA, one of the five hospitals in the St. Joseph Health System.
The breach affected an estimated 30,000 patients, according to Healthcare Info Security’s February 17 report.
The data did not contain Social Security numbers, financial data, or addresses, but did possibly include patient names, lab results, demographic information, and diagnoses lists, according to the St. Jude press release.
St. Jude is providing identity theft protection services to its patients at no cost.
- Woman shoots herself at Fort Knox hospital
- Welcome to the new and improved APCs Insider!
- Differentiate between types of wound debridement
- OB services: Coding inside and outside of the package
- CMS proposes change to two-midnight rule
- Note similarities and differences between HCPCS, CPT® codes
- What does case-mix index mean to you?
- ICD-10 tip: Coding for infectious and parasitic diseases
- Injections and infusions continue to confuse coders
- The perils of cut-and-paste documentation
- Q&A: Coding for palliative care
- AMA clarifies its intent with ICD-10 grace period
- Q&A: The opening conference
- 2015 IPPS Final Rule released
- Note from the Instructor: Billing for Preventive Services in a Rural Health Clinic
- News: CMS debuts web page for ICD-10 CC and MCC lists
- Ensure coding accuracy by following rules for selecting a principal diagnosis
- Auditing for coding mistakes on outpatient orthopedic cases