Cleveland hospital's unencrypted hard drive stolen, thousands affected

Share this article:

More than 7,100 patients who received care at University Hospitals of Cleveland are being notified that an unencrypted hard drive containing their data has been stolen.

How many victims? 7,170.

What type of personal information? Names, addresses, dates of birth, medical record numbers, insurance provider information and health information about specific patient treatment. Social Security numbers were compromised for 33 patients.

What happened? A thief stole the hard drive from the car of a third-party vendor working on upgrading the hospital's computer systems.

What was the response? University Hospitals has contacted law enforcement and opened an investigation into the theft. All patients are being notified by mail and the 33 who had their Social Security numbers exposed are being offered one free year of credit monitoring and identity theft protection services. The hospital is tightening its policies on use of technology by mandating that no devices be used unless encryption protection is active.

Details: University Hospitals was notified of the theft on Aug. 8.  

Quote: “There's no evidence that would lead us to believe that the thief knew what was on the hard drive or could even get into it,” Janice Guhl, a hospital spokeswoman, said. “We're trying to be very transparent because we want to make sure people are doing everything they can to protect themselves.”

Source: 19actionnews.com, 19 Action News, “University Hospitals possible security breach,” Nov. 4, 2013; cleveland.com, “UH notifies 7,100 patients of stolen hard drive with personal medical information,” Nov. 4, 2013.

Share this article:

Sign up to our newsletters

POLL

More in The Data Breach Blog

Data on 55,000 VFW members impacted by attacker seeking military intel

About 55,000 VFW members may have personal information at risk after an attacker seeking military intelligence gained access to a VFW web server.

More than 1,400 medical records compromised in Texas breach

More than 1,400 medical records were compromised after unauthorized access was gained to the health records system used by a Texas cardiology clinic.

Breach impacts thousands in Bibb County that applied for gov't jobs

A website security breach resulted in a compromise of data - including Social Security numbers - for thousands who applied for government jobs in Bibb County.