• UK HealthCare Public Notice

  • The University of Kentucky (UK) HealthCare is making public notice below of any incident involving the loss of UK HealthCare patient information. UK HealthCare takes seriously its commitment to safeguard the privacy of all patients and maintains this page as a means of communication to its patients about ongoing privacy issues. We have policies and procedures in place to protect patient information and reinforce those measures after any incident involving the loss of patient information.  


  • UK HealthCare Public Notice, October 5, 2017

    On four separate occasions, UK HealthCare employees accessed patient records outside their job responsibilities. The information accessed was limited to the patients’ identifiers and specific UK HealthCare visits. UK HealthCare notified the affected individuals.

    On two separate occasions, UK HealthCare patient receipts for payment were given to the incorrect recipients. The information was limited to the patients’ identifiers and their appointment information. It did not contain the patients’ phone numbers, birth dates, social security numbers, insurance information, or financial information. UK HealthCare notified the affected individuals.

    A UK HealthCare employee found a sheet with a patient’s information unattended in the hospital. The information was limited to the patient’s name, date of birth and prescription information. UK HealthCare notified the affected individual.

    On two separate occasions, UK HealthCare incorrectly mailed prescriptions to the incorrect recipients. The information was limited to the patients’ names, dates of birth and information about the prescriptions. UK HealthCare notified the affected individuals.

    A UK HealthCare employee gave an appointment reminder with patient information to the incorrect patient. The information was limited to the patient’s name, appointment date and time, and the name of the treating physician. UK HealthCare notified the affected individual.

    On two separate occasions, UK HealthCare employees messaged prescription information to the incorrect recipients. The information was limited to the patients’ names, dates of birth and information about the prescriptions. UK HealthCare notified the affected individuals.

    A UK HealthCare employee allowed email access to a third party outside of UK HealthCare. During this time, the third party had access to emails with patient registration, and laboratory test orders for 62 patients. UK HealthCare notified the affected individuals.


  • What you can do

    For any incident, UK HealthCare recommends the following steps to prevent any possible misuse of personal information.

    Stay alert for the signs of identity theft

    • Accounts you didn't open and debts on your accounts that you can't explain.
    • Fraudulent or inaccurate information on your credit reports, including accounts and personal information, like your Social Security number, address(es), name or initials, and employers.
    • Failing to receive bills or other mail. Follow up with creditors if your bills don't arrive on time.
    • Receiving credit cards that you didn't apply for.
    • Being denied credit or being offered less favorable credit terms, like a high interest rate, for no apparent reason.
    • Getting calls or letters from debt collectors or businesses about merchandise or services you didn’t buy.

    Order your free annual credit report

    You may also contact any or all of the three major Credit Reporting Agencies if you want to further learn about identity theft protection services offered by the Credit Reporting Agencies.  The contact information is:

    Equifax (www.equifax.com)
    P.O. Box 740241
    Atlanta, GA 30374-0241
    Phone: 800-685-1111

    Experian (www.experian.com)
    P.O. Box 2104
    Allen, TX 75013-0949
    Phone: 888-EXPERIAN (397-3742)

    Trans Union (www.transunion.com)
    P.O. Box 1000
    Chester, PA 19022
    Phone: 800-916-8800

    Additionally, both the federal government and Kentucky state government offer consumer protection agencies.  The contact information for the consumer protection agencies is below:

    Federal Trade Commission (https://www.identitytheft.gov/info-lost-or-stolen.html)
    600 Pennsylvania Avenue, NW
    Washington, DC 20580
    Phone: 202-326-2222

    Office of the Attorney General (http://ag.ky.gov/Pages/protectingconsumers.aspx)
    700 Capitol Avenue, Suite 118
    Frankfort, Kentucky 40601-3449
    Consumer Protection — 888-432-9257