Thomasville Eye Center

Thomasville Eye Center notified patients that an employee accessed patient records and opened an unauthorized credit account using personal information, including SSN and medical billing data. The incident was discovered on August 8, 2016. The employee was fired, law enforcement was notified, and Kroll was engaged for identity monitoring. Remediation included restricting access and masking SSNs.

Thomasville Eye Center disclosed that an employee accessed patient records and used personal information (including SSN and medical billing data) to open an unauthorized credit account. Discovered August 8, 2016. The employee was fired, law enforcement was notified, and one year of identity monitoring via Kroll was offered to affected patients.

Thomasville Eye Center (GA) reported to HHS on 2016-09-28 an Unauthorized Access/Disclosure affecting 10,891 individuals. An employee accessed patient records on a Desktop Computer without authorization and opened a fraudulent credit account for at least one patient. The employee accessed records of 11,137 individuals during employment, exposing names, addresses, dates of birth, Social Security numbers, and billing information. The employee was terminated and law enforcement (local and FBI) was notified. Corrective actions included employee retraining and revised access-control policies.