review of data breaches in healthcare

29
DATA BREACHES IN HEALTHCARE Source: DHHS OCR Breach Portal Data Download Date: December 26, 2016 Publication Date: January 2, 2017 Analytical tool: IBM Watson ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Upload: arete-zoe-llc

Post on 05-Jan-2017

88 views

Category:

Healthcare


5 download

TRANSCRIPT

Page 1: Review of data breaches in healthcare

DATA BREACHES IN HEALTHCARE Source: DHHS OCR Breach Portal Data Download Date: December 26, 2016 Publication Date: January 2, 2017Analytical tool: IBM Watson

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 2: Review of data breaches in healthcare

HUMAN TOLLIndividuals affected over the period from 2009 to 2016

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 3: Review of data breaches in healthcare

Individuals affected by state

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

78,8 million patientsMarch 2015Hacking/IT incident Network server

Page 4: Review of data breaches in healthcare

Individuals affected by type of breach

Theft HackingIT Incident Loss

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 5: Review of data breaches in healthcare

Business associates’ fault?

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 6: Review of data breaches in healthcare

Individuals affected by breach location

Network Server

Oth

er

Des

ktop

Laptop

Paper, films

E-media

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 7: Review of data breaches in healthcare

Individuals affected by covered entity type

Health plan Healthcare provider Business associate (blank)Healthcare clearing house

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 8: Review of data breaches in healthcare

Individuals affected by year

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 9: Review of data breaches in healthcare

INCIDENTSNumber of incidents over the period from 2009 to 2016

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 10: Review of data breaches in healthcare

Incidents by state

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 11: Review of data breaches in healthcare

Incidents by type of breach

Theft Unauthorized access/disclosure

HackingIT Incident

Loss

Oth

er

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 12: Review of data breaches in healthcare

Business associates’ fault?

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 13: Review of data breaches in healthcare

Incidents by breach location Paper/films Laptop Network server Other Desktop computer Email Other portable electronic device Other Electronic media record

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 14: Review of data breaches in healthcare

Incidents by covered entity type

Business associate Health plan Healthcare clearing house Healthcare provider (blank)

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 15: Review of data breaches in healthcare

Incidents by year

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 16: Review of data breaches in healthcare

HUMAN TOLLIndividuals affected in 2016

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 17: Review of data breaches in healthcare

Individuals affected by state

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

21st Century Oncology2,2 million patientsApril 2016Hacking/IT incident Network server

Page 18: Review of data breaches in healthcare

Individuals affected by type of breach

HackingIT Incident

Theft

Unauthorized access/disclosure

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 19: Review of data breaches in healthcare

Business associates’ fault?

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 20: Review of data breaches in healthcare

Individuals affected by breach location

Network Server

Laptop Other

EMRE-mail EMR

Network server, other

Paper film

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 21: Review of data breaches in healthcare

Individuals affected by covered entity type

Business associate Health plan Healthcare provider (blank)

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 22: Review of data breaches in healthcare

Individuals affected by year

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 23: Review of data breaches in healthcare

INCIDENTSNumber of incidents in 2016

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 24: Review of data breaches in healthcare

Incidents by state

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 25: Review of data breaches in healthcare

Incidents by type of breach

Hacking/IT incident Improper disposal LossTheft Unauthorized access/disclosure

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 26: Review of data breaches in healthcare

Business associates’ fault?

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 27: Review of data breaches in healthcare

Incidents by breach location

Network server Paper/films Email Other Laptop Electronic medical record Other portable electronic device Desktop computer Electronic medical record, network server

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 28: Review of data breaches in healthcare

Incidents by covered entity type

Healthcare providerHealth plan Business associate (blank)

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/

Page 29: Review of data breaches in healthcare

Incidents by year

ARETE-ZOE, LLC: 1334 E Chandler Blvd 5A-19, 85048 Phoenix, AZ, USA | T:+1-480-409-0778 (24/7) | website: http://www.aretezoe.com/