• buy 
• sell $
• about
• My DOTmed 

Griffin Hospital has notified 957 patients of an apparent breach of personal protected health information during the period from February 4, 2010 to March 5, 2010 after an investigation prompted by patient inquires revealed the breach.

Based on information available to it, Griffin Hospital has reason to believe that a radiologist previously, but not currently, affiliated with the hospital or on the Griffin Hospital Medical Staff accessed patient radiology reports on the hospital's Digital Picture Archiving and Communication System (PACS) using the passwords of other radiologists and an employee within the Radiology Department. The passwords were obtained and/or used without their knowledge.



PACS is a computer-based, digital image archiving system that maintains encrypted data of patient's radiological images that are accessible only through a user name and password entry system. The PACS system allows authorized physician users to access radiology study images through a secured network from workstations in the hospital and from remote locations outside the hospital.

From the investigation conducted by Griffin Hospital it appears the physician who gained unauthorized access scanned the PACS directory listings of 957 patients who had radiology studies performed at Griffin Hospital during the period and selected and entered (downloaded) the image files of 339 of these patients.

On and after February 26, 2010, Griffin Hospital received inquiries on behalf of patients regarding unsolicited contact by the physician who offered to perform professional services at another area hospital despite the patients' interest in having those services provided at Griffin Hospital. The inquiries prompted the investigation that revealed unauthorized intrusions into Griffin Hospital's PACS and, thereby, the breach of protected patient health information.

The physician was formerly a member of the Griffin Hospital medical staff who had been employed by the radiology group with which Griffin Hospital contracted for its radiology professional services. During that time the physician did have authorized access to the PACS. Thereafter, the physician's employment with the radiology group was terminated on February 3, 2010. That resulted in the loss of his medical staff appointment at Griffin Hospital and his authorization to access PACS. At the same time as the physician's PACS access was terminated his access password was revoked.

Continue reading Griffin Hospital Notifies Patients of Breach of Protected Health Information...

Pages: 1 - 2 - 3

>>