US District Medical Group Mar 2014 Technical Error (Q15313)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US District Medical Group Mar 2014 Technical Error |
A data breach risk event |
Statements
FDEEC5FB-6393-4E30-A220-DC73AD1BC1FA
March 2014
0 references
District Medical Group in Arizona reported that 616 patients had PHI involved in a breach that occurred on March 1, 2014. A statement on their web site explains: [_] On October 24, 2014, we became aware that patient information was made potentially accessible on the Internet. We immediately began an investigation and learned that an employee used a thumb drive while working at home that contained patient billing information. While working from home, the employee connected the thumb drive to the home network, and a security vulnerability made the contents of the thumb drive accessible from the Internet. While connected, the documents and information on the drive could be located through a search engine, such as Google. The thumb drive included patients names, dates of service, names of dep (English)
