UPMC has been notified by Epic Systems, UPMC’s electronic health records vendor, that a health information network may have improperly accessed medical records of some patients through a national network used to exchange medical information. A network named “Health Gorilla” electronically requested information under the pretext of providing treatment to shared UPMC patients and claimed it had permission to do so.
The national network enables health providers to exchange information for the treatment of their patients. UPMC is required to participate in this national network
UPMC is notifying patients who may have been impacted. The information accessed did not include social security numbers, but could have included name, age, diagnosis and medical history information.
UPMC has reported this incident to the U.S. Department of Health and Human Services Office for Civil Rights. If you have questions or concerns, please call 1-855-460-8762 (toll free) and leave your name, call back number, and preferred call back time between Monday-Friday between 9am and 5pm Eastern Time.
For more information, go to Privacy and Breach Alerts at UPMC | Pittsburgh, PA.
Related Posts:
