Portable Radiology Service Maintains Unprotected Database and Loses Patient Data

Who: Home Health Radiology Services (HHRS)

# of Accounts Breached: Estimated 37,000 people

What was affected: Names, date of birth, phone numbers, addresses, diagnoses, notes, and we even saw Social Security Numbers (SSN)

When it happened: March 1, 2019

How it happened: On March 1st a non-password protected database that contained what appeared to be medical case files was discovered. It is unclear how long this data may have been exposed or who else may have had access to these highly sensitive medical records.
This discovery contained the records of an estimated 37,000 people whose data has been potentially compromised in an alleged data breach involving New Jersey-based Home Health Radiology Services LLC. .

Outcome: It is unclear if this incident was reported to the authorities as required by HIPPA and New Jersey breach and notification laws. Despite several attempts and a request for comment regarding this data incident, Home Health Radiology Services LLC has not responded or commented at the time of this publication.