Kaiser Permanente Notifies 49K Patients of Data Breach in Anaheim

Kaiser Permanente has notified about 49,000 patients that some of their personal information was compromised in a September data breach at Anaheim Medical Center, AP/U-T San Diego reports (AP/U-T San Diego, 12/10).

Details of the Breach

Kaiser said a flash drive was reported missing Sept. 25 from the nuclear medicine department of the hospital. Patients were notified of the breach on Dec. 3.

The drive contained patients':

• Birth dates;
• Medical record numbers;
• Medication details; and
• Names (Koerner, Orange County Register, 12/10).

The drive did not contain patients' Social Security numbers or personal financial data.

According to the Los Angeles Times' "Money & Co.," the missing information was not encrypted nor protected by a password. 

Kaiser Reaction

In a statement, Kaiser spokesperson Peggy Hinz said, "Kaiser Permanente takes the protection of our members' personal and health information seriously, and we apologize for this occurrence" (Terhune, "Money & Co.," Los Angeles Times, 12/10).

Kaiser is advising its members to review their medical statements "to ensure no fraudulent use of their medical information has taken place."

However, Kaiser said it has no reason to suspect the information has been used for criminal activity (Orange County Register, 12/10).