Highline Medical Center

CHI Franciscan Healthcare Highline Medical Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-09-01. 9 Massachusetts residents were affected. The report records the breach type as electronic.

CHI Franciscan Health Highline Medical Center (WA) reported to HHS OCR on 2016-09-01 an Unauthorized Access/Disclosure affecting 18,399 individuals. A business associate inadvertently left files containing patient ePHI publicly accessible via the internet from approximately mid-April 2016 to June 13, 2016. Breached information located on Network Server included patient names, dates of service, health insurance information, and Social Security numbers. Following the breach, the CE terminated the BA relationship and the BA deleted all patient files from its systems.

Highline Medical Center notified Washington AG that vendor R-C Healthcare Management inadvertently left patient files accessible online from April 21 to June 13, 2016. Highline discovered the breach on July 22, 2016. Data included names, SSNs, and insurance info for 12,724 Washington residents. Highline offered credit monitoring and established a call center.

M Holdings Securities, Inc. notified Montana residents that a company computer containing personal information (names, SSNs, driver's licenses, financial account numbers) was stolen from an employee's car. The device was password-protected. The company retained forensic investigators, offered 12 months of identity protection, and notified law enforcement.