US University of Pennsylvania Health System Jun 2014 Physical Action (Q16260)

From Open Risk Manual
A data breach risk event
Language Label Description Also known as
English
US University of Pennsylvania Health System Jun 2014 Physical Action
A data breach risk event

    Statements

    June 2014
    0 references
    Officials at the University of Pennsylvania Health System have notified 661 patients about a data breach that occurred when receipts from Penn Medicine Rittenhouse containing personal health data were stolen last month, the Philadelphia Inquirer reports. Last week, the health system announced that the receipts had been taken from a locked office. The receipts included patients: Dates of birth; Names; and The last four digits of their credit card numbers. Susan Phillips, a senior vice president at the health system, said that there had been no arrests and no reported incidents of identity theft related to the incident, which she described as very low risk. She added that the health system is reviewing internal procedures to make any needed changes to keep patient information confidential ( (English)