On June 2, 2017, the UC Health Privacy Office was notified that a DDC employee accessed medical records without authorization between July 29, 2015, and June 2, 2017. The information that may have been viewed included the patients’ names, addresses, dates of birth, medical record numbers, diagnosis/condition, lab results, treatment, and medication information. The patients’ full Social Security numbers were not included with the information. The employee was relieved of their employment following confirmation of this unauthorized access.
DDC began mailing letters to 4,721 affected patients on August 1, 2017 and has established a dedicated call center to address individual patients’ questions. DDC is offering affected patients one year of credit monitoring and identity theft protection services through Experian.
DDC has taken necessary actions to safeguard against similar incidents in the future including implementing additional controls to regularly and proactively monitor access to electronic medical records and conducting additional training and education with staff regarding appropriate access and patient confidentiality. DDC sincerely regrets any inconvenience or concern this may cause for patients.
If you’re a patient and would like more information or have questions, please contact UC Health representatives at 1-800-936-2398 Monday through Friday, between 9:00 a.m. and 9:00 p.m (EST).