Mercy Medical Center Redding - Oncology Clinic

Mercy Medical Center Redding Oncology Clinic disclosed a privacy incident where transcribed physician progress notes containing patient demographic and treatment information (June–October 2014) were publicly accessible on a third-party website. The clinic notified patients on December 18, 2014, after the third party removed the link. No SSNs or financial data were involved. The clinic recommended fraud alerts and is enhancing staff education on securing medical information.

Mercy Medical Center Redding - Oncology Clinic reported to HHS on December 22, 2014, a breach affecting 616 individuals. The incident was caused by a business associate, Write-Type, Inc., which left electronic protected health information accessible on its website. The exposed data included names, addresses, medical record numbers, physicians’ names, and clinical information. The medical center has since revised its policies and procedures.

Affected (this filing): 616