Theft of External Hard Drive Containing Patient Information
At Saint Joseph Berea, on April 14, 2011, it was discovered that an external hard drive used to backup computer files for a bone density workstation was missing. It is believed that the external hard drive was stolen sometime between March 24, 2011 and April 14, 2011. This Notice provides information on how to determine whether your information may have been on the missing external hard drive and what Saint Joseph Berea is doing in response to this incident.
1. What information was on the external hard drive and how do I determine if I am affected?
This incident does not affect all of our patients. This incident only affects those patients who had a bone density scan at Saint Joseph Berea Diagnostic Imaging Department between July 1, 2004 and March 24, 2011. The external hard drive contains names and limited clinical and diagnosis information related to bone density scans. Social security numbers, financial and insurance information, are not on the external hard drive. We do not know for certain whether addresses are contained in the external hard drive.
- - If you received services at Saint Joseph Berea Diagnostic Imaging Department between July 1, 2004 and March 24, 2011, please call toll free 1-855-755-8479, Monday through Friday, 8 A.M. to 5 P.M. Eastern Standard Time. When prompted, please enter or say the following ten digit telephone pass code: 7547053111 to determine if you are affected.
2. When was the external hard drive stolen and what steps has Saint Joseph Berea taken?
On April 14, 2011, Saint JosephBerea discovered that an external hard drive used to backup computer files for a bone density workstation was missing. We believe that the external hard drive was stolen. The incident occurred between March 24, 2011 and April 14, 2011. The external hard drive was connected to a stand-alone imaging device and not connected to our information technology network. As soon as Saint Joseph Berea discovered the external hard drive was stolen, it immediately began an investigation in order to determine what happened and to determine what information was on the external hard drive.
3. Is law enforcement involved in investigating the theft?
Law enforcement is not involved in investigating the theft. At this time, the external hard drive has not been recovered.
4. What should I do to protect myself?
At this time, Saint Joseph Berea has no reason to believe that the external hard drive was stolen for the information that it contained. To date, we do not have any evidence that the files have been improperly accessed or misused. A person with a home computer would not be able to easily read the files unless special software tools were used. Social security numbers, financial, and insurance information were not on the external hard drive. As a precaution, however, we wanted to notify all potentially affected individuals of this incident and to assure that we are diligently investigating this incident.
5. What is Saint Joseph Berea doing to prevent future problems?
Saint Joseph Berea deeply regrets this incident. We are no longer using an external hard drive to backup this type of information. Saint Joseph Berea is committed to fully protecting all of the information that has been entrusted to us and appreciate the opportunity to provide treatment and care for our patients.