A number of healthcare companies were impacted by a strange data breach at STAT Informatics Solutions, LLC based in Waupaca, WI. STAT provides a number of healthcare companies with secure medical records services which include scanning of paper files that are saved to the medical record systems.
On March 3, 2020, a tornado hit a STAT center in Lebanon, TN. This resulted in the substantial damage of the building not to mention a portion of the records kept in the premises. STAT informed all impacted clients on the same day and employees from those healthcare companies went to the site to help locate and secure the medical records inside the building.
To control the possibility of unauthorized access, STAT erected a tall fence all-around the building whilst locating and securing the medical records. To stop unauthorized persons from entering the building, there were two security guards assigned on site 24 hours a day.
Most of the medical records were obtained from the remains of the building, however, the records were found to be unusable and were securely disposed of.
Though it is possible for unauthorized persons to have seen some paperwork associated with patients, there is no evidence that suggests unauthorized access. STAT believes that patients are not at risk of financial damage. As a safety precaution, however, patients who had their medical records stored in the building were sent breach notification by mail and will be provided free credit monitoring services.
The medical records stored at the STAT facility included these types of data: complete names, addresses, birth dates, Social Security numbers, medical record numbers, medical images, nursing and doctor documentation, diagnoses, lab test results, prescribed medicines, account numbers, and other types of data generally included in medical records.
The healthcare companies that confirmed they were impacted by the incident include:
- Bayfront Health Punta Gorda, FL
- Bayfront Health Port Charlotte, FL
- Commonwealth Health Moses Taylor Hospital, PA (1,905 records)
- Commonwealth Health Wilkes-Barre General Hospital, PA (518 records)
- Poplar Bluff Regional Medical Center, MO (1,619 records)