The Penn State Milton S. Hershey Medical Center said that protected health information for 1,801 patients had the potential to be improperly accessed because an employee was entering information into a log from a home computer.
The information is specifically related to a type of test ordered by Penn State Hershey women’s health or family medicine clinicians, as well as other medical practitioners in the community who used Penn State Hershey laboratories for testing, between August 1, 2013, and March 26, 2014, the medical center said in a statement.
An extensive internal investigation revealed no indication that any unauthorized personnel actually viewed or accessed the information, but the medical center can’t completely rule out the possibility, so it is notifying patients, the statement said.
An employee was entering information into a test log from home and outside the secured system, the statement said.
No Social Security numbers or financial information were included in the test log.
The medical center is attempting to reach all 1,801 patients by personnel letter, but any patient who believes they may be among those affected and who doesn’t receive a letter by June 12 can call 877-223-3689 Monday through Friday from 9:00 a.m. to 7:00 p.m. and provide the following ten-digit reference number when calling: 7045053014.