Box Elder, Mont.-based Rocky Boy Health Center posted a security breach notice on its website, alerting patients of a Jan. 14 incident that may have put medical records at risk.
Hospital CEO Jessica Windy Boy was alerted Jan. 16 that an unauthorized person got access to the medical records office. Rocky Boy Health Center discovered the lock on the office and padlock were forcibly removed. The health center believes the break-in occurred around Jan. 14.
Upon discovery, the hospital removed the records and contacted the police. The medical records contained X-rays and dental documents dating back to the late 1990s. Records included personal information, including names, dates of birth, Social Security numbers and diagnosis codes.
Rocky Boy Health Center has scanned all the medical files into its EHR to avoid further data breaches. The hospital also contracted a HIPAA-compliant company to shred all the paper medical records.