Press Releases: Northern California
January 13, 2010
Kaiser Permanente Provides Details Regarding Theft of Data Storage Device
Statement from Kristin Chambers, Vice President, Compliance and Privacy, Kaiser Permanente Northern California
Protecting personal health information is a top priority at Kaiser Permanente.
On December 1, 2009, an external electronic data storage device containing patient health information was stolen from a Kaiser Permanente employee’s car at the employee’s home in Sacramento. The employee notified Kaiser Permanente of the theft on December 8.
We immediately conducted a comprehensive investigation of the incident and have notified state and federal regulatory agencies. The theft was also reported to the Sacramento Police Department. We have determined there were no patient Social Security numbers or financial information on the device, and currently we have no evidence that the information has been used inappropriately. The information on the device included the patient’s full name and Kaiser Permanente medical record number, and depending on the individual, may have included other information such as their date of birth or age, gender, phone number, and date and other general information related to their care and treatment.
Based on our investigation, we believe that the employee was not using the information in an inappropriate or unlawful manner. The employee was authorized to access the information involved as part of her job — this was not a case involving inappropriate access to Kaiser Permanente’s electronic medical records, which are extremely secure.
However, the employee’s use of the device was unauthorized and violated Kaiser Permanente’s strict policies regarding data storage, and the employee was terminated.
We take this incident very seriously, and despite the relatively low risk to individuals posed by the theft of this device, we have notified and apologized in writing to approximately 15,500 patients in the Northern California region who were affected. Because we have no reason at this point to believe that the device was stolen for the information on it, nor that the information could easily be used for fraud or other criminal activity, we are not recommending that our patients take any further action related to this specific incident.
We regret any inconvenience or worry this incident may cause. Kaiser Permanente is committed to protecting the personal health information of our members and patients, and we are taking appropriate actions, including additional staff education and training, to further guard against such incidents.
We have established a toll-free number at 1-877-608-0050 for those with questions about this matter. Patients covered by Medicare can call: 1-800-443-0815. Those in need of a TTY can call 1-800-777-1370.
About Kaiser Permanente
Kaiser Permanente is committed to helping shape the future of health care. We are recognized as one of America’s leading health care providers and not-for-profit health plans. Founded in 1945, our mission is to provide high-quality, affordable health care services and to improve the health of our members and the communities we serve. We currently serve 8.6 million members in nine states and the District of Columbia. Care for members and patients is focused on their total health and guided by their personal physicians, specialists and team of caregivers. Our expert and caring medical teams are empowered and supported by industry-leading technology advances and tools for health promotion, disease prevention, state-of-the art care delivery and world-class chronic disease management. Kaiser Permanente is dedicated to care innovations, clinical research, health education and the support of community health. In 2008, Kaiser Permanente proudly directed approximately $1.17 billion to support community benefit programs and services through research, community-based health partnerships, and direct health coverage for low-income families and collaboration with community clinics, health departments and public hospitals. For more information, go to www.kp.org/newscenter.
