PHI Potentially Compromised at Rosenbaum Dental Group and Kingman Regional Medical Center
Kingman Regional Medical Center (KRMC) has discovered a flaw on its website resulted in the exposure of the protected health information (PHI) of certain patients.
KRMC became aware of the security issue on April 8, 2019 and the website was shut down while the security problem was investigated. Assisted by a third-party computer forensics company, KRMC determined that the configuration of the website was such that unauthorized individuals may have been able to gain access to patient information.
The website was housed on an isolated server, so any access to data was limited to the information stored on the server. For a small subset of patients who used the website to enter information related to their care, such as making an appointment, could have had the following information exposed: Name, date of birth, and information supplied related to a medical condition for which medical services were being requested.
Affected patients were notified of the breach by mail on June 7, 2019. The KRMC website has been offline now for more than 2 months. KRMC is in the process of rebuilding the website with enhanced privacy and security safeguards.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
Rosenbaum Dental Group Discovers Malware Infection
Rosenbaum Dental Group is notifying some of its patients that it has discovered malware on its systems, through which unauthorized individuals may have gained access to their protected health information.
The types of information stored on the affected system included names, addresses, telephone numbers, and health insurance information.
It was not possible to determine whether patients’ PHI was compromised in the malware attack. All patients of the dental group who have potentially been affected have been notified by mail and have been offered one year’s membership to credit monitoring and reporting services at no charge.
A breach notice has been submitted to the Department of Health and Human Services Office for Civil Rights which indicates 1,200 patients were affected by the breach.
