Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Puerto Rico: Puerto Rico Women and Children's Hospital announces health data breach

Bayamón Medical Centre and the Puerto Rico Women and Children's Hospital ('the Hospitals') announced, on 19 July 2019, that they had experienced a data breach potentially involving patients' personal information. In particular, the Hospitals outlined that after learning of the breach, they had hired an external consultant to assist in decrypting and recovering the affected records, and the Hospitals also conducted an internal investigation which determined that patient information was encrypted and that there was no indication that the information itself had otherwise been used by an unauthorised individual. 

In addition, the Hospitals each notified, on 19 July 2019, the U.S. Department of Health & Human Services' Office for Civil Rights ('OCR') of the breach. Bayamón Medical Center reported that 422,496 patients may have been affected and the Puerto Rico Women And Children's Hospital reported that 99,943 patients may have been affected. The OCR, which identified the Hospitals as Healthcare Providers under the Health Insurance Portability and Accountability Act of 1996, is investigating the breach. 

You can read the press release here, and access details on the OCR notification here