Employee posts patient data to third-party Microsoft cloud account

Synopsis

In October 2017, the healthcare company publicly disclosed and notified 24,000 affected patients that their protected health information had gone astray. More specifically, a physician who formerly worked at the company stored the data in a Microsoft OneDrive account accessible by some individuals at the University of Arizona (where the physician had started working).

The information stored on the cloud server included diagnostic and medical data, but no Social Security numbers or financial information.

Book a consultation

Want to discuss this case? You can purchase a 30 minute conference call with our analysts to discuss this case and the implications it has for your organisation. Just select the time and date that works for you:

Companies

  • Emory Healthcare

We've done the analysis so you can make the decisions

$489.99
When purchasing a minimum of 5 Case Studies
$699.99 if buying less than 5.

  • Detailed cause & effect analysis
  • Lessons learnt catalogued
  • Preventive controls extracted
Add to Cart
Heads up! Want to try before you buy? You can download our FREE demo case study here