Establishing Digital Trust: Don't Sacrifice Security for Convenience
Data accessed by the employee may have included names, addresses, birthdates, Social Security numbers, and diagnosis and treatment information. Still, the center says there's no indication that any of the data has been misused.
The center mailed notification letters to those affected on November 27, 2013, and is offering them two years of credit monitoring and identity protection services from AllClear ID.
"It is important to know that all Health Center employees are required to undergo training about patient privacy upon employment, and education is reinforced with ongoing training," center compliance integrity and privacy officer Iris J. Mauriello wrote in a statement on the center's Web site. "The Health Center continues to investigate this matter and the employee in question has been placed on administrative leave."https://o1.qnsr.com/log/p.gif?;n=203;c=204650394;s=9477;x=7936;f=201801171506010;u=j;z=TIMESTAMP;a=20392931;e=i
In March of 2013, the UConn Health Center announced that a former employee had inappropriately accessed approximately 1,400 patient records, and similarly offered all those affected a two-year subscription to a credit monitoring service.