Patient data at risk following missing unencrypted CD

Share this article:

Jersey City Medical Center (JCMC) patients are being notified that their information may have been compromised after an unencrypted CD went missing after being mailed.

How many victims? The number of patients affected is undisclosed.

What type of personal information? Names, Social Security numbers and birth dates.

What happened? An unencrypted CD containing patient information went missing after it was mailed by the JCMC via United Parcel Service to a company that intended to review payments to hospitals in the state.

What was the response? JCMC sent letters to those impacted by the breach and has offered them one year of free identity theft monitoring.

Details: The package was mailed on June 13, 2014 and was to be delivered on June 16. According to the letter sent to patients affected by the incident, JCMC “learned on or about that date” that the scheduled package had not arrived. By July 22, 2014, JCMC received a letter from the United Parcel Service notifying it that the package could not be found. The information contained on the CD is related to the NJ Medicaid program. .

Quote: “The Medical Center sincerely regrets this unfortunate incident because we consider the security of patient information to be of the utmost importance,” Shani Newell, privacy officer at the Jersey City Medical Center, said in the notification letter.

Source: libertyhealth.org, “Jersey City Medical Center Letter to Patients” August 2014.
Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

RECENT COMMENTS

FOLLOW US

More in The Data Breach Blog

About 60K transactions possibly affected in Cape May-Lewes Ferry breach

The security of card processing systems relating to food, beverage and retail sales at the Cape May-Lewes Ferry was compromised and payment card data may be at risk.

Arkansas State University-Beebe is investigating a potential breach

Arkansas State University-Beebe is notifying students and employees of a service running on one of its servers that could pose a potential breach to the system.

Unencrypted discs missing, Arizona State Retirement System notifies 44,000

Arizona State Retirement System notifies nearly 44,000 individuals enrolled in dental plans that two unencrypted discs containing their personal information are missing.