Minneapolis-based Allina Health recently began notifying patients that a certified medical assistant at Allina’s Inver Grove Heights Clinic had inappropriately accessed their personal health information. The medical assistant has since been fired (h/t Becker’s Hospital Review).
“We began a thorough investigation after the first unauthorized access was confirmed on September 18, 2013,” Allina said in a statement. “In the course of our investigation, we determined that the individual accessed some patients’ electronic medical record outside of her normal job duties between February, 2010 and September, 2013.”
The inappropriately accessed data may have included patients’ names, addresses, phone numbers, birthdates, clinical information, health insurance information, and the last four digits of their Social Security numbers.
KARE 11 reports that more than 3,000 patients may have been affected in total, and that Allina Health is offering free identity and financial monitoring services to those affected.
“To help prevent similar incidents from happening in the future, we are evaluating our policies related to protecting patient information, examining our computer security programs and continuing to educate employees on their obligation to maintain the privacy of patient information,” Allina stated.
Patients with questions are advised to contact (866) 317-7301.