• UK HealthCare Public Notice

  • The University of Kentucky (UK) HealthCare is making public notice below of any incident involving the loss of UK HealthCare patient information. UK HealthCare takes seriously its commitment to safeguard the privacy of all patients and maintains this page as a means of communication to its patients about ongoing privacy issues. We have policies and procedures in place to protect patient information and reinforce those measures after any incident involving the loss of patient information.  


  • UK HealthCare Public Notices for June 2, 2017

    On two occasions, a UK HealthCare employee gave a patient’s discharge summary note to the incorrect patient.  The information was limited to the patient’s identifiers and a summary of their visit with UK HealthCare. It did not contain the patient’s address, phone number, social security number, insurance information, or financial information. UK HealthCare notified the affected individual.


    On three separate occasions, three UK HealthCare patients’ bills were sent to the incorrect addresses.  The information was limited to the patients’ identifiers and their billing information with UK HealthCare. The information did not contain the patients’ addresses, phone numbers, birthdates, social security numbers, insurance information, or financial information. UK HealthCare notified the affected individuals.


    A UK HealthCare employee accessed patient records outside their job responsibilities. The information was limited to specific visit information at UK HealthCare.  UK HealthCare notified the affected individuals.


    UK HealthCare business associate Midwest Medical Records Association (MMRA) mailed copies of patients’ medical records to the wrong recipients.  The recipients contacted UK HealthCare Medical Records department and returned the documents to UK HealthCare.  The information contained in the mailings included the patients’ identifiers and health records for specific visits.  It did not contain the patients’ insurance information or financial information. UK HealthCare notified the affected individuals.


    A UK HealthCare employee faxed a patient’s test results report in error.  The information was limited to the patient’s identifiers and test results from UK HealthCare. It did not contain the patient’s social security number, insurance information, or financial information. UK HealthCare notified the affected individual.


    A University of Kentucky HealthCare worker lost a medication log containing two patient names.  The medication log information was limited to the patient names, medical record numbers, and names of medication.  The list did not contain a Social Security number, insurance information, or financial information.  UK HealthCare notified the affected individuals.


    A University of Kentucky subcontractor exposed the records of two University of Kentucky HealthCare patients to the public.  The information exposed was limited to the patient names and medical record numbers.   It did not contain the patient social security number, insurance information, or financial information. UK HealthCare notified the affected individuals.


    A University of Kentucky HealthCare worker emailed patient status information to the wrong recipient.  The email contained patient name and brief status information about the patient condition.   The list did not contain other identifying information, social security number, insurance information, or financial information.  UK HealthCare notified the individual.


    In two separate instances, a UK HealthCare worker provided prescription information to the wrong patient.  The prescription information was limited to the patient names, addresses, and medications.  The prescription information did not contain other identifying information, social security number, insurance information, or financial information.  UK HealthCare notified the affected individuals.


    UK HealthCare mailed a patient status summary to the incorrect patient.  The information in the letter was limited to the name, address, and test results for the patient.  It did not contain the patient’s social security number, insurance information, or other financial information.  UK HealthCare notified the affected individual.


       

  • What you can do

    For any incident, UK HealthCare recommends the following steps to prevent any possible misuse of personal information.

    Stay alert for the signs of identity theft

    • Accounts you didn't open and debts on your accounts that you can't explain.
    • Fraudulent or inaccurate information on your credit reports, including accounts and personal information, like your Social Security number, address(es), name or initials, and employers.
    • Failing to receive bills or other mail. Follow up with creditors if your bills don't arrive on time.
    • Receiving credit cards that you didn't apply for.
    • Being denied credit or being offered less favorable credit terms, like a high interest rate, for no apparent reason.
    • Getting calls or letters from debt collectors or businesses about merchandise or services you didn’t buy.

    Order your free annual credit report

    You may also contact any or all of the three major Credit Reporting Agencies if you want to further learn about identity theft protection services offered by the Credit Reporting Agencies.  The contact information is:

    Equifax (www.equifax.com)
    P.O. Box 740241
    Atlanta, GA 30374-0241
    Phone: 800-685-1111

    Experian (www.experian.com)
    P.O. Box 2104
    Allen, TX 75013-0949
    Phone: 888-EXPERIAN (397-3742)

    Trans Union (www.transunion.com)
    P.O. Box 1000
    Chester, PA 19022
    Phone: 800-916-8800

    Additionally, both the federal government and Kentucky state government offer consumer protection agencies.  The contact information for the consumer protection agencies is below:

    Federal Trade Commission (https://www.identitytheft.gov/info-lost-or-stolen.html)
    600 Pennsylvania Avenue, NW
    Washington, DC 20580
    Phone: 202-326-2222

    Office of the Attorney General (http://ag.ky.gov/Pages/protectingconsumers.aspx)
    700 Capitol Avenue, Suite 118
    Frankfort, Kentucky 40601-3449
    Consumer Protection — 888-432-9257