Fired physician still had access to Illinois nursing center's EHR, potentially exposing 1,000+ individuals' info

Becker's Hospital Review

Jackie Drees

Round Lake Beach, Ill.-based Hillcrest Nursing Center began notifying more than 1,000 residents in November that one of its staff physicians, who was fired in August, still had access to its EHR after being terminated and viewed their health information.

The nursing center reported the data breach Nov. 24 to HHS as affecting 1,030 individuals. In a notice posted to its website, Hillcrest said that the physician was fired Aug. 4; on Aug. 23, some of the center residents' family members notified Hillcrest that they had received phone calls from the terminated physician discussing the resident's care and treatment.

Hillcrest discovered Aug. 24 that the terminated physician still had access to its EHR system. The center then...

Get the Morning Update

Thanks for subscribing!