Harris Health System Notifies Patients of Privacy Incident
Harris Health System is notifying over 5,000 patients of a "privacy incident" where a former employee allegedly accessed and released patient information to unauthorized individuals several years ago. The incident involves the Lyndon B. Johnson Hospital building, which is part of the Harris Health System.
What Happened
An internal investigation conducted by Harris Health in 2021 found that a former employee may have accessed medical and insurance information of patients without permission in 2011. The information accessed may have included Social Security numbers, according to Harris Health. The employee was terminated after the investigation, which was conducted with the help of a national forensics firm.
Investigation and Notification
The FBI launched an investigation into the alleged data leak in 2021 and required Harris Health to delay notifying patients. Harris Health only received permission from the FBI to begin notifying patients of the privacy incident this week. A spokesperson for the health system declined to reveal the name of the former employee, citing privacy concerns.
Impact on Patients
Harris Health has not been able to determine which specific patients’ information was disclosed outside the organization. However, they are notifying all patients whose electronic medical records may have been impermissibly accessed by the former employee. Patients are encouraged to review statements from health insurers and report any charges for services they didn’t receive to the insurer.
Support for Affected Patients
The health system is offering patients whose Social Security information may have been accessed with complimentary credit monitoring. Information on these services will be provided in the notification letters being mailed to patients. Harris Health has also implemented enhanced proactive monitoring and auditing capabilities to detect and prevent similar incidents in the future.
Conclusion
The privacy incident at Harris Health System is a serious concern for patients whose personal and medical information may have been compromised. While the health system has taken steps to notify and support affected patients, it is essential for patients to remain vigilant and monitor their accounts for any suspicious activity. By providing complimentary credit monitoring and enhancing their security measures, Harris Health is working to prevent similar incidents from occurring in the future and protect the sensitive information of their patients.
