North Shore University Hospital sends notice of unauthorized access to personal information
February 1, 2022 Contact: Jason Molinet
516-380-6995
[email protected]
North Shore University Hospital sends notice of unauthorized access to
personal information
MANHASSET, NY – North Shore University Hospital (“NSUH”) today announced that
it has sent notices to 7,614 patients about an incident involving the unauthorized access of
personal health information.
NSUH learned that a former employee who worked at a medical office may have
improperly accessed patient records from its electronic medical record systems in violation of its
policies. After thorough investigation, it was determined on April 11, 2019, that the employee
improperly accessed certain patient information between October 2009 and February 2019.
The employee was suspended during the investigation and was subsequently terminated.
NSUH notified law enforcement of the incident and has cooperated with the investigation, which
included following law enforcement’s instructions to delay notifying any patients who were
potentially impacted by this incident until February 1, 2022.
To date, NSUH has no evidence that the information that the former employee may have
improperly accessed was misused in any manner. Also, to the best of the hospital’s knowledge,
law enforcement did not bring any charges against the former employee.
While there is no evidence that the former employee accessed Social Security numbers,
credit card numbers or any other payment-related information, the patient information that the
former employee accessed may have included the following categories of information:
demographic-type information such as name, date of birth, address, phone number, insurance
information, and internal medical record number; and clinical information such as the treatment
location, treatment provider, date(s) of service, reason for visit, a summary of medical history, a
list of medications, test results, diagnoses, and/or other treatment-related information.
NSUH has a robust compliance program that includes ongoing training of its employees,
implementation of security tools to monitor access to medical record applications, and audits of
medical record access. NSUH has taken additional steps to try to prevent this type of incident
from occurring in the future, including bolstering access controls and re-training of staff on the
importance of protecting patient confidentiality.
Although there is no evidence of any subsequent misuse of the information, as an added
precaution, NSUH is offering all impacted patients complimentary identity theft protection
services through Experian IdentityWorksSM for one (1) year, unless a longer time period is
required by applicable state law.
This notice is being provided in accordance with the media notice requirements of the
Health Insurance Portability and Accountability Act, as amended by Health Information
Technology for Economic and Clinical Health Act. NSUH has notified impacted patients and
will notify relevant regulatory bodies, including the U.S. Department of Health and Human
Services.
Link to Patient Notice
# # #
About North Shore University Hospital
North Shore University Hospital, founded in 1953, is a 756-bed, tertiary and quaternary care teaching
hospital that has been rated among the best in the region by U.S. News & World Report. A member of
Northwell Health, New York State’s largest health system, North Shore University Hospital provides
world-class cardiac, neurology, orthopedic, urology and trauma care services and has become a
transplant destination, offering solid organ transplant for heart, kidney, liver and lung. It’s Katz
Women’s Hospital offers comprehensive, compassionate care for expectant mothers. North Shore
University Hospital is part of the 58-acre Sandra Atlas Bass Campus, employs more than 7,000 highly
experienced physicians, nurses, and other medical staff and is affiliated with the Donald and Barbara
Zucker School of Medicine at Hofstra/Northwell.
516-380-6995
[email protected]
North Shore University Hospital sends notice of unauthorized access to
personal information
MANHASSET, NY – North Shore University Hospital (“NSUH”) today announced that
it has sent notices to 7,614 patients about an incident involving the unauthorized access of
personal health information.
NSUH learned that a former employee who worked at a medical office may have
improperly accessed patient records from its electronic medical record systems in violation of its
policies. After thorough investigation, it was determined on April 11, 2019, that the employee
improperly accessed certain patient information between October 2009 and February 2019.
The employee was suspended during the investigation and was subsequently terminated.
NSUH notified law enforcement of the incident and has cooperated with the investigation, which
included following law enforcement’s instructions to delay notifying any patients who were
potentially impacted by this incident until February 1, 2022.
To date, NSUH has no evidence that the information that the former employee may have
improperly accessed was misused in any manner. Also, to the best of the hospital’s knowledge,
law enforcement did not bring any charges against the former employee.
While there is no evidence that the former employee accessed Social Security numbers,
credit card numbers or any other payment-related information, the patient information that the
former employee accessed may have included the following categories of information:
demographic-type information such as name, date of birth, address, phone number, insurance
information, and internal medical record number; and clinical information such as the treatment
location, treatment provider, date(s) of service, reason for visit, a summary of medical history, a
list of medications, test results, diagnoses, and/or other treatment-related information.
NSUH has a robust compliance program that includes ongoing training of its employees,
implementation of security tools to monitor access to medical record applications, and audits of
medical record access. NSUH has taken additional steps to try to prevent this type of incident
from occurring in the future, including bolstering access controls and re-training of staff on the
importance of protecting patient confidentiality.
Although there is no evidence of any subsequent misuse of the information, as an added
precaution, NSUH is offering all impacted patients complimentary identity theft protection
services through Experian IdentityWorksSM for one (1) year, unless a longer time period is
required by applicable state law.
This notice is being provided in accordance with the media notice requirements of the
Health Insurance Portability and Accountability Act, as amended by Health Information
Technology for Economic and Clinical Health Act. NSUH has notified impacted patients and
will notify relevant regulatory bodies, including the U.S. Department of Health and Human
Services.
Link to Patient Notice
# # #
About North Shore University Hospital
North Shore University Hospital, founded in 1953, is a 756-bed, tertiary and quaternary care teaching
hospital that has been rated among the best in the region by U.S. News & World Report. A member of
Northwell Health, New York State’s largest health system, North Shore University Hospital provides
world-class cardiac, neurology, orthopedic, urology and trauma care services and has become a
transplant destination, offering solid organ transplant for heart, kidney, liver and lung. It’s Katz
Women’s Hospital offers comprehensive, compassionate care for expectant mothers. North Shore
University Hospital is part of the 58-acre Sandra Atlas Bass Campus, employs more than 7,000 highly
experienced physicians, nurses, and other medical staff and is affiliated with the Donald and Barbara
Zucker School of Medicine at Hofstra/Northwell.
