Malicious software infects Kaiser Permanente’s server
Kaiser Permanente (KP) has notified approximately 5,100 members of a privacy incident that compromised one server at its Northern California Division of Research (DOR).
Malicious software infected a server used specifically for research purposes at the DOR, which is not connected to KP’s EHR records. KP identified the infection on Feb. 12 and immediately removed the server, the health system reported.
“The server did not contain Social Security numbers or the members’ EMRs. We have found no evidence to date that the information on the server or connected to the server was ever actually opened, copied or used by any unauthorized persons,” according to a statement from Tracy Lieu, MD, DOR director.
KP notified state and federal authorities and “we are continuing to take appropriate steps to help prevent a future incident like this,” said Lieu.