BreachExchange mailing list archives

Hospital notes found in street


From: Erica Absetz <erica () riskbasedsecurity com>
Date: Tue, 2 Apr 2013 09:56:41 -0400

http://www.theboltonnews.co.uk/news/local/10326409.Hospital_notes_found_in_street/

HOSPITAL notes with confidential information about 25 patients were
found in the street by a shopper.

Lynn Copeland, aged 46, was on her way to get a paper from Plodder
Lane News on Good Friday, when she saw some papers on the floor.

She picked them up, thinking the person opening up the shop had dropped them.

But when she opened the folded A4 papers, she discovered they were
confidential medical notes.

She took them home to prevent them falling into the wrong hands, and
when she phoned the hospital to tell them, she claims she was cut off.

There were four pages which contained details of 25 patients.

They showed their name, age, medical history, specialist information,
mobility, dietary requirement, hygiene, home circumstances and
discharge plan.

It did not have addresses on.

The documents showed the name of the person who printed them out — on
Thursday at 6.33pm — and on the documents it says “please destroy
paper copy at the end of every shift.”

A full investigation has now been launched by hospital bosses.

Miss Copeland, who lives in Bradford Road, Farnworth, said: “If I had
just gone into the hospital and handed them in, they would say thank
you and nothing would be done about it.

“This is confidential and personal information that should have been destroyed.

“If my details were on those sheets I would be absolutely fuming.

“I rang the hospital and asked to speak to the person in charge and I
was cut off. I rang back and said I had found confidential information
and I was cut off again.

“I don’t want to get anyone in trouble but people in hospital have a
right to privacy.”

She added: ”It was a strange place to find it. It could have fallen
out of someone’s bag or pocket, but at the end of the day it should
have been shredded and not taken off the site.”

Cllr Linda Thomas said: ”I am sure there will be a thorough
investigation to find some answers.

“It is distressing for the people whose notes were found but I am sure
the hospital will get to the bottom of it and tighten up procedure.”

In May, 2011, a diner at McDonald’s found similar notes in the
restaurant’s bin in Derby Street. It contained details of 19 patients.

A probe was launched by the hospital, but they were unable to pinpoint
who was responsible.

A full written report was prepared by the hospital, but it was not made public.

Cllr Andy Morgan, who sits on Bolton Council’s health, overview and
scrutiny committee said: "This is the third occurrence that we know
about of lost data at the hospital.

"There was the McDonald's incident and stuff flying off the back of a truck.

"It is completely unacceptable. People should be confident their data is safe.

"I hope the new chief executive gets a grip of this. We need to get
the basics right and have a right to be concerned."

A statement from the senior management team at the hospital said: “We
take all confidentiality issues very seriously and, therefore, are
extremely concerned to hear of the incident.

“We apologise to the carers of the patients concerned and we have
contacted all the relevant patients. We will be holding an immediate
investigation.”
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.


Current thread: