Lost tapes at Nemours affects 1.6M patients
Three unencrypted computer backup tapes containing patient billing and employee payroll data have been reported missing from a Nemours facility in Wilmington, Del., according to the health system.
The information on the tapes dates principally between 1994 and 2004 and relates to approximately 1.6 million patients and their guarantors, vendors and employees at Nemours facilities in Delaware, Pennsylvania, New Jersey and Florida. The missing back-up tapes contained information such as name, address, date of birth, Social Security number, insurance information, medical treatment information and bank account information.
According to Nemours, the tapes were stored in a locked cabinet following a computer systems conversion completed in 2004. The tapes and locked cabinet were reported missing on Sept. 8, and are believed to have been removed on or about Aug.10 during a facility remodeling project.
“There is no indication that the tapes were stolen or that any of the information on them has been accessed or misused,” the organization said in a statement. “Independent security experts retained by Nemours determined that highly specialized equipment and specific technical knowledge would be necessary to access the information stored on the backup tapes. There are no medical records on the tapes.”
President, CEO David J. Bailey asserted that this is an isolated incident unrelated to patient care and safety.
Nemours is notifying individuals who may have been affected and offering them one year of free credit monitoring and identity theft protection as well as call center support. Nemours also stated it is taking immediate steps to strengthen its data security practices including moving towards encrypting all computer backup tapes and moving non-essential computer backup tapes to a secure, offsite storage facility.
The information on the tapes dates principally between 1994 and 2004 and relates to approximately 1.6 million patients and their guarantors, vendors and employees at Nemours facilities in Delaware, Pennsylvania, New Jersey and Florida. The missing back-up tapes contained information such as name, address, date of birth, Social Security number, insurance information, medical treatment information and bank account information.
According to Nemours, the tapes were stored in a locked cabinet following a computer systems conversion completed in 2004. The tapes and locked cabinet were reported missing on Sept. 8, and are believed to have been removed on or about Aug.10 during a facility remodeling project.
“There is no indication that the tapes were stolen or that any of the information on them has been accessed or misused,” the organization said in a statement. “Independent security experts retained by Nemours determined that highly specialized equipment and specific technical knowledge would be necessary to access the information stored on the backup tapes. There are no medical records on the tapes.”
President, CEO David J. Bailey asserted that this is an isolated incident unrelated to patient care and safety.
Nemours is notifying individuals who may have been affected and offering them one year of free credit monitoring and identity theft protection as well as call center support. Nemours also stated it is taking immediate steps to strengthen its data security practices including moving towards encrypting all computer backup tapes and moving non-essential computer backup tapes to a secure, offsite storage facility.