The HIPAA Journal is the leading provider of news, updates, and independent advice for HIPAA compliance

Californian Oncologist Announces PHI Theft

In November, 2015, the offices of Californian oncologist/hematologist, Michael S. Benjamin, M.D., were burgled. The thieves stole a number of paper charts which contained a limited amount of protected health information of his patients.

Patients have now been notified of the data breach by mail, and the Department of Health and Human Services’ Office for Civil Rights (OCR) was alerted to the security breach on December 28, 2015. The breach report listed on the OCR breach portal indicates 1,300 individuals were impacted by the breach.

When a data breach is suffered that impacts more than 500 individuals, in addition to issuing individual breach notification letters to the victims, HIPAA-covered entities are obliged to provide a notice to “prominent media outlets serving the State or jurisdiction.” As with the issuing of the individual notices, covered entities have up to 60 days following the discovery of a breach in order to do this.

According to the media notice, a number of data were contained in the charts, which included names of patients, dates of birth, addresses, phone numbers, marital statuses and the names of the spouses of patients. Clinical information was securely stored in an EHR system which was not compromised during the burglary.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

The health information exposed was limited to the height and weight of patients as well as blood pressure data recorded on each visit. The names of referring physicians were also listed on the charts along with lab values. Social Security numbers and insurance information were also stolen during the burglary.

The thieves did steal patient data that could potentially be used to commit identity theft and fraud. Consequently, patients have been advised to monitor their credit carefully and check Explanation of Benefits statements for any sign of fraudulent activity.

The burglary was reported to law enforcement immediately upon discovery and a police investigation has led to the apprehension of a suspect. A number of the charts have now been recovered by police officers.

Author: Steve Alder is the editor-in-chief of HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist