N.Y. City breach could affect close to 1.7 million patients

The New York City Health and Hospitals Corporation (HHC) has begun to notify nearly 1.7 million patients and hospital staff, vendors, contractors and others about a recent reported theft of computer backup tapes containing electronic data, including personal or protected health information (PHI). The reported theft affects those who were served by or provided services to Jacobi Medical Center, North Central Bronx Hospital and their two affiliated health centers during the past 20 years.

“The data in the stolen files is not readily accessible without highly specialized technical expertise and data-mining tools, and there is no evidence to indicate that the information has been accessed and misused,” a Feb. 11 HHC press release stated.

The files were reportedly stolen on Dec. 23, 2010, from a vehicle operated by GRM Information Management Services. “GRM reported the incident to the police and dismissed the driver of the vehicle. To date, the files have not been recovered,” HHC said.

The stolen files contained personal information collected from staff, vendors and contractors by the hospitals’ occupational health services, HHC reported. "They also included personal information of the hospitals’ staff, vendors, and contractors that is electronically filed in order for these individuals to conduct their business at or provide services for the hospitals."

HHC has taken measures to prevent a recurrence, including terminating the contract with the vendor and filing suit to hold it responsible for covering costs associated with notifying all affected individuals, and to pay for other damages related to the loss of the data, according to HHC.

“Letters in 17 languages have begun to be mailed to patients and affected individuals this week advising them of the theft and informing them of protective services that have been made available,” the release stated. “HHC is offering free credit monitoring and fraud resolution services for one year and has opened a toll-free phone information hotline.” Customer care centers were to open at both hospitals on Feb. 14.