Tuesday, February 20, 2018

Bogalusa hospital patients notified of patient data breach

Posted: Friday, October 13, 2017 | Views: 1963

Bogalusa hospital patients notified of patient data breach
From LSU Health Care Services Division

Baton Rouge - LSU Health Care Services Division was informed on August 11, 2017, by Our Lady of the Angels Hospital, in Bogalusa, LA and formerly under the operation and management of LSU Health Care Services Division as Bogalusa Medical Center until March 17, 2014, that one of the hospital’s employees admitted to inappropriately accessing patient information during their time of employment at the hospital.

The investigation did not find any evidence that the former employee used or shared any personal information improperly. Our Lady of the Angels Hospital has stated that the employee has since been terminated from employment at the hospital. The employee indicated to Our Lady of the Angels Hospital that similar inappropriate activity occurred during the period when the hospital was under the management of LSU Health Care Services Division as Bogalusa Medical Center.

Upon receipt of information necessary to begin the investigation on August 24, 2017, LSU Health Care Services Division began its own investigation of any potential inappropriate access by the employee. Based on a review of employment records, the employee may have been inappropriately accessing Bogalusa Medical Center’s patient information from February 19, 2003, through March 17, 2014. LSU Health Care Services Division will soon begin the process of notifying those patients where the investigation indicates their information may have been inappropriately accessed.

Patient information which would have been available to the employee included patients’ names, addresses, dates of birth, Social Security numbers, insurance identification information, dates of service, reasons for service, diagnoses, and physician orders. LSU Health Care Services Division does not believe that the inappropriate access has placed any patient information at risk of harm. However, out of an abundance of caution and commitment to our former patients, notification of this incident is being sent to the public.

The employee indicated that the motivation for inappropriate access was curiosity, and therefore there is no indication that identity theft is a concern. However, it is always prudent to monitor your financial accounts and credit history. LSU Health Care Services Division sincerely regrets any inconvenience or concern this incident may cause its former patients.

Strict privacy and security policies are in place now and were in place during operation of Bogalusa Medical Center. Although LSU Health Care Services Division no longer operates Bogalusa Medical Center, it is still committed to the security of its former patients’ protected health information. Any questions concerning this matter should be directed to LSU Health Care Services Division’s Compliance and Privacy Department at 1-800-735-1185