Former resident physician kept patient docs without permission

University of Arkansas for Medical Sciences (UAMS) is alerting hundreds of patients that a former resident physician stored confidential medical documents without consent.

How many victims? 1,500.

What type of personal information? Names, partial addresses, medical record numbers, birth dates, diagnoses, medications and lab results.

What happened? The school learned of this because the resident produced the sensitive documents as part of a lawsuit against the university related to her firing. Her termination was not related to the breach.

What was the response? UAMS notified the victims by letter and through its website.

Details: The resident pledged under oath that she did not share the data with anyone else. The documents now are sealed under a court order.

Source: arkansasonline.com, Arkansas Democrat-Gazette, "UAMS warns patients of privacy breach," Nov. 26, 2012.

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.