Puerto Rico: Puerto Rico Women and Children's Hospital announces health data breach
Bayamón Medical Centre and the Puerto Rico Women and Children's Hospital ('the Hospitals') announced, on 19 July 2019, that they had experienced a data breach potentially involving patients' personal information. In particular, the Hospitals outlined that after learning of the breach, they had hired an external consultant to assist in decrypting and recovering the affected records, and the Hospitals also conducted an internal investigation which determined that patient information was encrypted and that there was no indication that the information itself had otherwise been used by an unauthorised individual.
In addition, the Hospitals each notified, on 19 July 2019, the U.S. Department of Health & Human Services' Office for Civil Rights ('OCR') of the breach. Bayamón Medical Center reported that 422,496 patients may have been affected and the Puerto Rico Women And Children's Hospital reported that 99,943 patients may have been affected. The OCR, which identified the Hospitals as Healthcare Providers under the Health Insurance Portability and Accountability Act of 1996, is investigating the breach.