CardioNet, Inc.

BioTel Heart notified customers that a third-party vendor failed to secure medical records stored online, potentially exposing them to the public between October 17, 2019, and August 9, 2020. The incident was discovered on January 28, 2021. Affected data included names, contact info, dates of birth, medical diagnoses, treatments, health insurance info, and potentially Social Security numbers. BioTel terminated the vendor relationship and offered two years of credit monitoring.

BioTel Heart (a trade name under which both CardioNet, LLC and LifeWatch, Inc., operate) reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-26. 407 Massachusetts residents were affected. The report records the breach type as electronic.

HHS OCR settled with CardioNet for $2.5 million regarding the impermissible disclosure of unsecured electronic protected health information (ePHI) in violation of HIPAA Privacy and Security Rules.

CardioNet, Inc. (PA) reported to HHS OCR on 2012-02-27 a Theft breach affecting 728 individuals. Breached information was located on a Laptop. No business associate was identified as present. The theft of a laptop device likely resulted in the unauthorized access to protected health information including patient health and demographic data.

CardioNet, Inc. (PA) reported to HHS OCR on 2012-01-10 a Theft incident affecting 1,300 individuals. Breached information was located on a Laptop. No business associate was identified. The covered entity is a healthcare provider offering cardiac monitoring services based in Pennsylvania.