McLaren Greater Lansing (Mich.) has allegedly left patient records in a decommissioned hospital, NBC affiliate WILX reported April 27.
The health system held an auction at a closed-down Lansing, Mich., campus, where an individual found a box of patient files that contained information such as names, addresses, phone numbers and other medical information.
McLaren Greater Lansing told the publication that it was unacceptable that an individual was able to access documents that had yet to be destroyed.
"We are conducting a comprehensive investigation into how an individual was able to gain access to documents and will fully comply with any regulatory requirements — including providing appropriate communication and protection for patients — that result from the investigation," a spokesperson for the health system told WILX.
McLaren Greater Lansing said it would be taking additional measures to reverify all patient files awaiting destruction and will make sure those files are locked in a secure area so that they cannot be accessed.