Tuesday, June 7, 2016

EHR violation at 2 ProMedica hospitals

ProMedica Bixby and Herrick Hospitals, both part of 13-hospital ProMedica based in the area pf Toledo, are notifying over 3,500 sufferers after founding that workers were searching at electronic medical records without authorization.


The tragedy is a reminder that while cyber attacks from the outside get important media attention, other security risks that have been around for several years need continued monitoring.


In its public filing on the violation, ProMedica reported that while the violation was founded in the month of April, the breaches had occurred since the month of May 2014. During that time, 7 workers approached the electronic records for sufferers they were not straightly treating and without valid business and clinical reasons, a ProMedica statement demonstrated.


Potentially compromised data involved the sufferer names, addresses, phone numbers, birth dates, and insurance, diagnoses, medications and other clinical data. ProMedica has disciplined some of the workers and fired others; in addition, it has started a new auditing program that involves the software that monitors worker activity in the EHR.


The agency is offering impacted individuals one year of credit monitoring services.

No comments:

Post a Comment