UF Health Shands Provides Notice of Data Privacy Event

BY JENNIFER CABRERA

GAINESVILLE, Fla. – University of Florida Health (UF Health) Shands has notified approximately 941 patients that information in their medical records may have been inappropriate accessed by an employee between April 27, 2021, and July 21, 2022.

UF Health Shands says they learned about the data breach on August 9, 2022, and that an investigation into the incident determined that certain patient demographic information (such as name, date of birth, mailing address, and phone number), medical record number, physician’s name, and limited clinical information (such as diagnosis/conditions and visit dates) may have been accessed or viewed. In some instances, the insurance group and subscriber/policy numbers may have also been involved. This incident did not involve Social Security numbers.

UF Health Shands said in a press release that they immediately began an investigation, fired the employee, and terminated the employee’s access to all medical records and other information systems.

They also engaged a data breach recovery expert and notified all affected patients by mail. UF Health Shands stated that they have no reason to believe that the information was further used or disclosed; however, out of an abundance of caution, free identity theft protection services, including credit monitoring, have been provided to all patients whose insurance group and subscriber/policy numbers may have also been involved.

Any patients who did not get a letter in the mail but would like to know if their information was affected can call 1-833-903-3648, Monday through Friday, 9 a.m.-9 p.m. EST.