A server that was hacked Nov. 3 contained first and last names, as well as diagnoses for 30 patients treated between the late 1980s and 2004, according to The Lantern, OSU’s student newspaper. Information on 150 student patients treated in 2006 included names and Social Security numbers. The university since 2006 has discontinued use of the SSN as an identifier, a spokesperson tells Health Data Management.
The university learned of the breach from an individual outside the organization, the newspaper reports. Affected former students received notification letters in mid-December and the older patients were notified in early January, according to the spokesperson.
Be the first to comment on this post using the section below.