Massachusetts General Hospital


Under Review: 
No Review
Date Breach Made Public: 
March 24, 2009
geo: 
Boston , MA
United States
Records Breached: 

192 (No SSNs or financial information reported)

Breach Total Number: 
0
Source: 
Dataloss DB
Year of Breach: 
Type of organization: 
Type of breach: 

Massachusetts General Hospital has put dozens of patients on notice that it has lost some of their confidential medical records, which were left on an MBTA Red Line train by a hospital employee. The MGH employee left the hospital, taking the records with her to do billing work on them over the weekend. The records belonged to at least 66 patients and included private information such as the patients' diagnoses, their names, birth dates and billing information.

UPDATE (2/24/2011): Massachusetts General Hospital agreed to pay one million dollars to settle violation of privacy charges. http://www.hhs.gov/ocr/privacy/hipaa/news/mghnews.html

UPDATE (6/08/2012): The lost documents consisted of a patient schedule with names and medical record numbers for 192 patients.  There were also billing encounter forms with names, dates of birth, medical record numbers, health insurer and policy numbers, diagnoses, and provider names for 66 of those patients.