Breach, Compliance Management, Data Security, Privacy

Presence Health pays $475K to settle date breach suit

The Chicago-based Presence Health agreed to pay $475,000 to settle a lawsuit that stated the health care organization did not report a 2013 data breach in a timely fashion.

The Chicago Tribune reported the patient information on 836 people scheduled to undergo surgery at the Surgery Center at Presence St. Joseph Medical Center went missing on Oct. 22, 2013, but Presence Health did not tell those affected about the breach until Feb. 3, 2014.

The U.S. Department of Health and Human Services requires such notifications be sent within 60 days of a breach.

The type of information compromised included names, birth dates, the date and type of procedure being conducted, medical record numbers, the surgeon's name and types of anesthesia to be used.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.