Yale New Haven Hospital announces breach of radiology files
Yale New Haven Hospital today announced Friday that a file created for research was “unintentionally posted on a public facing website and may have been accessed by a small number of people.”
YNHH learned on April 18 that “a web file containing patient information was inadvertently made accessible via our website,” according to a statement. “YNHH immediately took steps to ensure the website and content were no longer accessible or searchable via the internet. We also engaged a third-party forensic firm to assist us in our investigation.”
The hospital’s statement said its investigation “determined the web file was accessible between December 16, 2021 and April 18, 2022.”
“The file was made accessible through human error, was inadvertent in nature and was not due to intentional or malicious actions,” the statement said. “A review of the file determined it included name, telephone number, email address, age range, preferred language, medical record number, procedure type, and date and location of service,” but there was no Social Security number nor financial information included in this file.
“We deeply regret any inconvenience and concern this incident may cause you,” the statement said. “Yale New Haven Hospital understands the importance of maintaining your protected health information, and we take seriously the security of this information.”
The hospital said that, as a result of the incident, it has “reviewed the security permissions across our internet facing systems and will provide training and guidance to remind employees of their continued need to safeguard patient health information. Additionally, we are continuing to enhance our existing technical safeguards to further protect our systems and the information we maintain.”
The hospital said it “truly regrets any inconvenience or concern this has caused. As a premier healthcare provider, we strive to demonstrate respect for patients and our community and to always safeguard that information.”
Letters were mailed to all those whose information was involved in this incident and anyone who has any concern, they can call 855-503-1965, the statement said.
