Unencrypted backup tapes have gone missing from two Women & Infants Hospital ambulatory sites. An investigation and search of the facilities was unable to locate the missing items. The backup tapes from their Providence, Rhode Island and New Bedford, Massachusetts locations contained patient names, dates of birth, dates of exams, physicians’ names, patient ultrasound images, and, in some instances, Social Security numbers. The losses mean that the hospital no longer has the ultrasound images, but they do still have the full report of the ultrasound and its findings in their patients’ electronic medical record.
Best practice – Encrypt backups containing sensitive information.