Oregon’s Health CO-OP Notifies Affected Plan Members Of Security Incident
In reading the substitute notice below, note that they do not say from where the laptop was stolen, nor how many were affected. And what kind of “commitment” to privacy is it to just password-protect a laptop with PHI – and to keep “former member and dependent” information on it? C’mon, folks. We can and must do better.
As part of its ongoing commitment to protecting the privacy of personal health information, Oregon’s Health CO-OP is notifying members of a security incident.
On April 3, 2015, a password protected laptop containing Oregon’s Health CO-OP member and dependent information was stolen. The theft was immediately reported to law enforcement and an active investigation is underway.
The information on the stolen laptop included current and former member and dependent names, addresses, health plan and identification numbers, dates of birth and social security numbers. No medical information was on the laptop. There is no indication this personal information has been accessed or inappropriately used by unauthorized individuals.
In order to further safeguard affected individuals from any potential misuse of their personal information, Oregon’s Health CO-OP is offering free identity theft protection services through ID Experts®. The protection services include: 12 months of identity protection, a $20,000 insurance reimbursement policy in the event of identity theft, and access to fraud resolution representatives. With this protection, ID Experts will help resolve issues if an affected individual’s identity is compromised.
Oregon’s Health CO-OP has established a confidential inquiry line, staffed with professionals trained in identity and credit protection and restoration who are familiar with this incident and the contents of this notice. Members with questions regarding this incident can visit www.myidcare.com/oregonprotection or call 1-800-285-9862 Monday through Friday, 8:00 a.m. to 8:00 p.m. Pacific Time, excluding major holidays.
This press release is in accordance with the Health Information Technology for Economic and Clinical Health (HITECH) Act. Oregon’s Health CO-OP has notified affected members and the Department of Health and Human Services (HHS).
SOURCE Oregon’s Health CO-OP