Memorial Hermann Health System has hit by internal data breach caused by employee who gained unauthorized access to the organization’s electronic health record (EHR) system over a six and half year. Employee gained access to patients’ names, addresses, medical record numbers, dates of birth, health insurance information, and, in some instances, Social Security numbers.
According to the reports, financial data such as credit card or bank information wasn’t involved in the breach. Memorial Hermann Health System brought in outside forensics experts and suspended the employee’s access to patient records.
According to the Memorial Hermann Health System notification:
We value patient privacy and deeply regret any inconvenience this may have caused our patients. Although privacy training is in place for all employees, Memorial Hermann continues to investigate and to review its privacy policies and practices in an effort to prevent something like this from happening in the future.
Organization has notified the affected patients and working on the process. To stop such kind of breach access controls should be monitored properly and only authorized employees should be able to view the Protected Health Information (PHI).
Alertsec strengthens security
Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption by using industry leading Check Point Full Disk Encryption (former Pointsec) software.
Organizations, especially corporate giants, have to have an information security policy in place that proves they have taken necessary steps and measures to safeguard the information they gathered. If these policies are not adhered to, the regulators may prosecute.
Alertsec Xpress is used by organizations that have recognized the need to protect their information. Customers range from single-user sole traders and consultants to multinational companies with a large number of offices around the globe. Over 4 million users worldwide use Alertsec Xpress’s Check Point Full Disk Encryption.