"Healthcare Provider Exposed Transplant Donor and Recipient Data"

The Virginia Commonwealth University Health System (VCU) has recently warned almost 4500 transplant participants about a privacy breach affecting their healthcare information.  VCU noted that some transplant recipients’ medical records contained their donor’s information, while recipient information also showed up in some donors’ records.  The information available included names, Social Security numbers, lab results, medical record numbers, the dates of medical procedures, and dates of birth.  In total, 4441 people were affected.  VCU stated that this information may have been viewable to transplant recipients, donors, and/or their representatives when they logged into the recipient’s and/or donor’s patient portal.  VCU added that the information might also have been released in response to information requests.  VCU made the discovery on February 7 this year, discovering more about the information affected in April.  The information had been accessible to recipients and donors as far back as January 2006.

Infosecurity reports: "Healthcare Provider Exposed Transplant Donor and Recipient Data"