Hawaii Pacific Health Investigates Data Breach Incident
Cybersecurity3 min read

Hawaii Pacific Health Investigates Data Breach Incident

1 Jan 20241 Jan 2024 hawaiipacifichealth.org

Hawaii Pacific Health disclosed a data breach affecting patient information, believed to be accessed by a former employee. The organization is taking steps to enhance security and support affected individuals.

Key Takeaways

  • 1.A thorough investigation revealed that this employee had improperly accessed patient records during a span from November 2014 to January 2020.
  • 2."We identified that the employee accessed patient records...some instances of access may not have been for a valid reason," HPH stated, emphasizing the seriousness of the breach.
  • 3.> "The trust our patients have in us to provide for their health care needs is very important to us, and that includes safeguarding their personal information," ## Looking Ahead In light of the breach, HPH is actively reviewing its internal security protocols and staff training programs.

In January 2020, Hawaii Pacific Health (HPH) faced a significant challenge when it learned that sensitive patient information may have been unlawfully accessed by an employee of Straub Medical Center. A thorough investigation revealed that this employee had improperly accessed patient records during a span from November 2014 to January 2020. "We identified that the employee accessed patient records...some instances of access may not have been for a valid reason," HPH stated, emphasizing the seriousness of the breach.

The involved employee is no longer with Straub Medical Center, and the notice was issued not just on behalf of Straub but also included Kapiolani Medical Center for Women & Children, Pali Momi Medical Center, and Wilcox Medical Center. This disclosure came as part of HPH’s commitment to transparency and accountability regarding patient data security.

The types of patient information that may have been exposed include a wide array of sensitive data. This encompasses demographic details such as names, addresses, phone numbers, and other vital identifiers like Social Security numbers. Furthermore, records contained medical history information, including past and current dates of service, appointment details, and health insurance information.

Person using laptop with holographic cybersecurity shield and digital interface elements
Person using laptop with holographic cybersecurity shield and digital interface elements

Impact and Legacy

"The trust our patients have in us to provide for their health care needs is very important to us, and that includes safeguarding their personal information," said HPH representatives. The organization recognizes the critical nature of the trust placed in them by patients and understands that any breach can significantly impact their relationship.

"The trust our patients have in us to provide for their health care needs is very important to us, and that includes safeguarding their personal information,"

Looking Ahead

In light of the breach, HPH is actively reviewing its internal security protocols and staff training programs. "We are also looking at new technologies that will improve our ability to more quickly detect patterns of access that may indicate an employee is viewing health information inappropriately," the organization added. This proactive approach underscores their commitment to preventing future incidents.

"We are also looking at new technologies that will improve our ability to more quickly detect patterns of access that may indicate an employee is viewing health information inappropriately,"

Impact and Legacy

To address the concerns of those affected, HPH took the step of mailing letters to all individuals whose information might have been compromised on March 17, 2020. While the organization believes the motivations of the ex-employee were likely rooted in curiosity rather than ill-intent like identity theft, they are nonetheless offering supportive measures. "HPH is including an offer of one year of free credit monitoring and identity restoration services," the organization announced, reflecting their commitment to assist those impacted by the breach.

"HPH is including an offer of one year of free credit monitoring and identity restoration services,"

For anyone who has not yet received notification regarding this incident but wishes to verify if their data was potentially exposed, HPH encourages individuals to reach out. A dedicated toll-free call center has been established to handle inquiries, available at **(833) 570-0382**. The center operates from 6 am to 6 pm PST, Monday through Friday, excluding national holidays.

Data center server room with multiple monitors displaying code and red LED lighting
Data center server room with multiple monitors displaying code and red LED lighting

Looking ahead, Hawaii Pacific Health’s swift actions in response to this breach highlight the importance of data security in the healthcare sector. As they continue to strengthen their internal procedures and explore advanced technologies, the organization aims to restore patient trust and confidence in its commitment to securing personal health information.

More Stories