Memorial Hermann Notifies Patients of Privacy Incident
Memorial Hermann Health System is committed to protecting the confidentiality and security of our patients’ information. Regrettably, this notice concerns an incident involving some of that information.
On July 7, 2014, we learned that a now former clinical employee accessed patients’ electronic medical records outside of the employee’s normal job duties from December 2007 to July 2014. We immediately launched a thorough investigation, including hiring outside forensics experts, and suspended the employee’s access to the medical records.
Our investigation, which was finalized in August, determined that the employee accessed some patients’ medical records. These included patients’ names, addresses, medical record numbers, dates of birth, health insurance information, and, in some instances, social security numbers. Patients’ financial information, such as credit cards or bank accounts, was not included.
This incident does not affect all Memorial Hermann patients, only certain patients during the specified timeframe.
Following the completed investigation, we began mailing letters to affected patients on August 29, 2014, and established a dedicated call center to answer any questions they may have. If you have not received a letter by September 19, 2014, but believe you are affected, please call 1-877-819-9774, Monday through Friday, between 8:00 a.m. and 8:00 p.m. Central Time.
We value patient privacy and deeply regret any inconvenience this may have caused our patients. Although privacy training is in place for all employees, Memorial Hermann continues to investigate and to review its privacy policies and practices in an effort to prevent something like this from happening in the future.