The study, by Xuefeng “John” Jiang, MSU associate professor of accounting, and colleagues from Johns Hopkins and Ball State universities, is published in JAMA Internal Medicine. The data breaches occurred in health care facilities ranging from UC Davis Medical Center in California to Henry Ford Hospital in Michigan.
“Our findings underscore the critical need for increased data protection in the health care industry,” Jiang said. “While the law requires health care professionals and systems to cross-share patient data, the more people who can access data, the less secure it is.”
The researchers examined Department of Health and Human Services data for the period October 2009-December 2016. By law, hospitals covered by the Health Insurance Portability and Accountability Act, or HIPPA, must notify HHS of any breach affecting 500 or more individuals within 60 days from the discovery of the breach.
Related Articles
- Treating Hard-to-Reach Patients with Health Information Exchanges & Mobile Devices
- Health Information Theft a Pressing Concern for U.S. Patients
- Five Strategies Can Reduce Risk of Medical Lawsuits
- Electronic Record Demands Are Overwhelming Many Physicians
What they found was alarming:
- Healthcare providers reported 1,225 of the 1,798 recorded breaches, while business associates, health plans and healthcare clearinghouses reported the rest.
- 257 breaches reported by 216 hospitals.
- 33 hospitals experienced more than one breach – many of which are large, major teaching hospitals.
Click here to read the full press release.
