Carolina Oncology Specialists

Carolina Oncology Specialists (NC) reported to HHS on 2017-10-16 an Unauthorized Access/Disclosure affecting 1,551 individuals. Breached information located on Electronic Medical Record. A former employee with legitimate access to patient files used that access to misappropriate patient PHI — including names, addresses, birthdates, SSNs, and some medical information — to open fraudulent credit card accounts. The breach was discovered after credit card companies contacted the CE and a patient reported a suspicious transaction. Police were notified; the former employee was identified as the prime suspect. The CE implemented enhanced network monitoring and granular PHI access controls.