Unauthorized parties may have accessed hard copies of records for patients of Planned Parenthood of the Heartland in Dubuque, Iowa, after the organization moved out of its old building.
The security incident affects 2,506 patient records from August 2008 through April 2014 and includes information such as patient names, birth dates, mailing addresses, insurance information, Social Security numbers, medical record numbers, diagnosis, treatment plans and lab results.
Planned Parenthood of the Heartland says it has no indication any information has been accessed or used by unauthorized individuals.
"We have conducted a rigorous review of our processes and revised our facilities relocation protocols. All staff responsible for facility relocation have been apprised of these modifications," said Penny Dickey, chief clinical officer of Planned Parenthood of the Heartland. "We sincerely regret that this incident occurred, and we are currently conducting a comprehensive examination of our processes to ensure such an incident will never occur again."
More articles on data breaches:
Half-year in review: 8 biggest data breaches from the past 6 months
Hackers breach Mass General vendor, compromise 4,300 records
Dignity Health data breached by third-party employee with fake nursing license