University Urology Notifies 1,144 Patients Their PHI Was Provided to a Competing Provider

Knoxville, Tenn.-based University Urology has announced a data breach that occurred when patients' protected information was compiled by an administrative employee and provided to a competing healthcare provider for the purpose of soliciting patient business.

The employee released the names and address of 1,144 University Urology patients to the competing healthcare provider in 2013 and early 2014.

The breach was discovered following an investigation initiated after University Urology began receiving telephone calls Feb. 13 from concerned patients stating they received solicitation letters from a competing provider.

"We understand that any breach of protected health information is a concern for our patients. We sincerely regret this situation occurred," said Peggy Kares, HIPAA security officer at University Urology, in the notification letter. 

As a result of the breach, University Urology terminated the administrative employee who provided the patients' information, changed network passwords and secured an agreement with the competing provider to destroy all University Urology patient information of any kind.

More Articles on Data Breaches:

Lubbock Cardiology Clinic Announces Data Breach Affecting 1,400 Patients
5 Recent Data Breaches Caused by Employees 
Midwest Orthopaedics at Rush Announces Data Breach Affecting 1,200 Patients