Harris Health has found themselves in the unenviable position of alerting more than 5,000 patients to a significant privacy breach. A former employee, who was terminated for their actions, allegedly accessed and shared medical records without proper authorization. The information shared could include sensitive data such as Social Security numbers, medical data, and insurance details.
In an investigation that has spanned years and involved collaboration with a national forensics firm and the FBI, Harris Health is grappling with the aftermath of an employee's misconduct, which first came to light in 2021. It was then discovered that the unauthorized access occurred over a shockingly long period of time—stretching from January 4, 2011, to March 8, 2021, according to CW39. Because of the ongoing FBI investigation, there was a considerable delay in patient notification.
The compromised information encompasses a wide range of personal and medical details. Harris Health, as stated in a press release obtained by Houston Public Media, has been unable to determine exactly which patient records were disclosed outside the organization. Nevertheless, they are in the process of notifying all patients whose electronic records may have been accessed.
Harris Health has begun reaching out to the affected parties, advising them to review their insurance statements for any unfamiliar charges. Bryan McLeod, a spokesperson for the health system, stated, "To date, Harris Health has not been able to determine which specific patients’ information was disclosed outside the organization, but is notifying all patients whose electronic medical record may have been impermissibly accessed by the former employee," as noted by Houston Public Media. Those whose Social Security numbers are at risk will be provided with free credit monitoring services, a step intended to mitigate the potential fallout from this sizable breach.
In response to the incident, Harris Health is stepping up their defenses against future breaches, enhancing monitoring systems, and further training staff. As per their notification efforts, the health system is mailing letters to potentially impacted patients and has set up a dedicated line at 1-866-291-1870 for those with queries regarding the breach. Patients are encouraged to remain vigilant and report any discrepancies they discover in their records or billing statements.
