UW Medicine in Seattle became aware of a vulnerability on a website server that made protected internal files available and visible by search on the internet on Dec. 4, 2018.
SEATTLE, Feb. 20, 2019 /PRNewswire/ -- On Dec. 26, 2018, UW Medicine in Seattle became aware of a vulnerability on a website server that made protected internal files available and visible by search on the internet on Dec. 4, 2018. The files contained protected health information (PHI) about reporting that UW Medicine is legally required to track, such as reporting to various regulatory bodies, in compliance with Washington state reporting requirements.
When we learned of the exposure of the files to the internet, we took immediate steps to remove the information from the site and initiated appropriate measures to remove saved information from any third-party sites. At this time, there is no evidence that there has been any misuse or attempted use of the information exposed in this incident.
The files contained patients’ names, medical record numbers, and a description and purpose of the information. The files did not contain any medical records, patient financial information or Social Security numbers.
Based on the results of our internal investigation, we are in the process of distributing letters to approximately 974,000 affected patients and have reported this incident to the Office for Civil Rights. Additionally, a trusted vendor, ID Experts, will manage a call center and website (https://ide.myidcare.com/uwmedicine) on behalf of UW Medicine beginning February 20. The call center hours are 5 a.m. to 5 p.m. Pacific Standard Time, Monday-Friday. The toll-free number is 844.322.8234.
We regret that this incident occurred and sincerely apologize for any distress this may cause our patients and their families. UW Medicine is committed to providing quality care while protecting patients’ personal information. We are reviewing our internal protocols and procedures to prevent this from happening again.
For more information, please see the “Questions and Answers” included with the original news release.
About UW Medicine
UW Medicineʼs mission is to improve the health of the public by advancing medical knowledge, providing patient care, and training the next generation of health professionals. Our system includes Harborview Medical Center, Northwest Hospital & Medical Center, Valley Medical Center, UW Medical Center, UW Neighborhood Clinics, UW Physicians, UW School of Medicine and Airlift Northwest. Visit uwmedicine.org for details.
UW Medicine media contacts:
- Tina Mankowski – (o) 206.685.3841, (m) 206.949.1983, ochs@uw.edu
- Susan Gregg – (o) 206.616.6730, (m) 206.390.3226, sghanson@uw.edu
View original content:http://www.prnewswire.com/news-releases/data-exposure-incident-300799152.html
SOURCE UW Medicine
