Utah clinic reports possible breach of 2,600 records

A Utah-based medical clinic notified federal health officials of a potential data breach of approximately 2,600 medical appointment records, according to a March 22 article in the Salt Lake Tribune.

The records, all from 2012, had been slated for shredding when they went missing at the Granger Medical Clinic. The records included patient names, appointment dates and times and reasons for the medical visit–-but did not disclose addresses, birth dates, medical claims information, Social Security numbers or financial information, according to the article.

The records were discovered missing on Jan. 22, and affected patients were promptly notified. The clinic has reported no indication of improper use of the records. The clinic’s attorney, Steven Hester, told the Salt Lake Tribute that Granger Medical Clinic is implementing new data procedures, including ending the policy of printing and shredding appointment records.

Hester also reportedly said that the records could have been destroyed but the clinic staff failed to document that action.