UPMC: Ex-employee accessed patient records

Nov. 27--PITTSBURGH -- UPMC is alerting more than 1,300 people who were treated at various UPMC locations throughout the last year that a former employee inappropriately viewed their medical records.

The health system determined through an internal investigation that the UPMC McKeesport employee, who has since been terminated, accessed patient records including names, dates of birth, contact information, treatment and diagnosis information, and Social Security numbers. Another employee discovered the inappropriate activity and alerted hospital management in early November, prompting the investigation.

The now-former employee was not involved in the patients' care and did not have a valid reason to access the records -- a violation of Health Insurance Portability and Accountability Act privacy laws, according to a UPMC news release.

The employee told UPMC that she did not store the information or use it for financial gain, but the health system decided to inform patients out of an "abundance of caution."

"We suggest that everyone take steps, including credit monitoring, to protect his or her identity," John Houston, UPMC's vice president of privacy and information security, said in the release.

UPMC alerted local and federal authorities of the incident as well as the U.S. Department of Health and Human Services, as required by the HIPAA. UPMC also is providing additional employee training and will continue with its own review to enhance privacy policies and procedures.

UPMC is sending letters to patients whose information may have been viewed. Patients who have questions or concerns may call the UPMC Office of Patient and Consumer Privacy at 412-647-6286 or check UPMC.com for additional privacy information.

___

(c)2013 the Beaver County Times (Beaver, Pa.)

Visit the Beaver County Times (Beaver, Pa.) at www.timesonline.com

Distributed by MCT Information Services