US Christus St. John Hospital 2012 Physical Action (Q15772)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US Christus St. John Hospital 2012 Physical Action |
A data breach risk event |
Statements
B35C205C-EED2-4E62-BEBA-A560895BB646
January 2012
0 references
Houston-based CHRISTUS St. John Hospital fell victim to unencrypted device theft in late September when a memory stick containing patient data was lost on the hospital campus. The hospital notified affected patients on Nov. 16 on its website after it learned about the breach on Sept. 25. However, it also told the New Hampshire Attorney Generals Office of the breach on Nov. 16 through its New York-based law firm Baker & Hostetler, as the firm reported that a New Hampshire residents information was on the lost device. The number of patients affected hasnt been determined, but patient information included name, date of birth, Social Security number, health insurance information, diagnoses, and progress notes on patients in the St. John Sports Medicine Program from Jan. 1, 2011 to July 31, 20 (English)
