INTEGRIS Data Breach Compromises Personal Patient Information

Millions of INTEGRIS Health patients are being notified their personal information was compromised in a data breach.

The healthcare network says it is telling patients what information was compromised and what they should do to protect themselves.

The data breach notification states personal information was compromised and offers 24 months of identity protection.

Attorney David Hyman recommends setting up that protection as soon as possible.

After a data breach affecting more than 2 million INTEGRIS Health patients in November, the medical network says it is taking steps to prevent further compromise.

A statement from INTEGRIS Health states:

“It is a sad reality of doing business today that new threats continuously emerge in an attempt to disrupt the care we provide and impact the trust of those who rely upon us in their time of need.”

It’s a reality Attorney David Hyman says hospitals must actively work to prevent.

“These sorts of things happen all around the country with a certain amount of regularity,” Hyman said.

And because of that regular threat, Hyman says hospitals are not exposed to potential lawsuits if they follow guidelines set by the US Department of Health and Human Services.

“They have to tell you what you what it is that your risk exposure is as a result of the breach,” Hyman said.

Hyman says federal law also requires healthcare facilities to provide data protection services.

The notification from INTEGRIS offers those affected by the breach up to 24 months of identity protection.

“If they haven't done that, the government could levy some substantial penalties, but that money goes to the government, not to the individuals,” Hyman said.

That's what happened after a data breach at OSU Center for Health Services affected nearly 280,000 patients.

The Department of Health and Human Services found many violations, including failing to timely notify affected individuals, leading to an $875,000 settlement.

Integris says it is investigating the breach and is taking steps to further secure patient data.