U. seeks return of stolen billing records

Return To Article
Add a comment
  • Alan D
    June 29, 2008 4:02 p.m.

    I recently received MY letter from the U. Are any lawyers looking into this? Is anyone working on a class action suit?
    I can't help but wonder, if I sign up for their "free credit monitoring" am I agreeing to NOT seek other action against the UMC?

  • Guy
    June 16, 2008 10:28 p.m.

    At least the illegals won't have to worry about their identities. They get everything for free without any personal information.

  • melanie
    June 13, 2008 11:50 a.m.

    One year of free credit check?????? They'd better come up with something to make us not feel to violated. We can't even sleep well at night. Here we are taking every precaution with our personal information buying shreders and everything and the University hits us with this stupid mistake. How long before we can sleep again?

  • Stephanie
    June 11, 2008 8:30 a.m.


  • IT Man
    June 11, 2008 7:38 a.m.

    Encrypt your backup tapes. That way if the tapes are lost or stolen, the data is unreadable. Even if Mickey Mouse is carting them around.

  • infomation?
    June 11, 2008 12:41 a.m.

    Will those records have patients most private infomation? Such as doctor's notes? medications their taking? diagnosis? symptoms? WOW I cannot believe this. Are all you passive Utahns just going sit around and wait for the consequences to happen to you because of someone's mistake that can effect you for a life time? Someone has to pay for this I say who ever decided to use that Mickey Mouse company that has courier's that do not follow procedure. It was probably the cheapest company to do the job, never mind about high security for their patients personal infomation. Start firing the upper echelon and down over this poor decision to use a Mickey Mouse courier service, probably to save money. Getting rid them will save the university millions. Just like they are hiring all brand new nurses with no experience to take care of their patients trying to save themselves money so they can get their big paychecks, never mind the patient care this is tragic!!!!!!!!

  • outraged!!
    June 11, 2008 12:06 a.m.

    A courier using his personal vehicle then parking over night in Kearns? Are you joking? Why isn't there more comments about this story? Can anyone find more information about the legal ramifications and the responsibility that the University of Utah Healthcare system has now for all their patients. Such a inexcusable decision and error made by a very large healthcare system in not safeguarding their patients most private infomation.This could be a tragedy for millions of people, not just in Utah but so many of their patients in other states.

  • The NIT
    June 10, 2008 11:27 p.m.

    What horrible writing and grammar usage from the previous respondents to this article! I would estimate the average age must be around 11 - based on the English usage. By the way, the University of Utah hospital system must be terribly embarrassed by this mess and should pay a dear price. Maybe they will learn to appropriately protect confidential information [ever heard of HIPPA?]. Hopefully, other medical providers will also learn from this situation.

  • Check this out
    June 10, 2008 9:11 p.m.

    Directly from Perpetual Storage's website:

    "Any organization which fails to institute appropriate data security can expose not only the organization but its board of directors individually and personally to substantial liability, which can be imposed by contract an/or by law. The board of directors of a company has a fiduciary responsibility to the stockholders to protect all of the assets of the company. Failure to establish and maintain a reasonable security program is a breach of that fiduciary duty; in case of substatial loss, the members of the board may be personally liable to stockholders whose stock has been devalued. The corporation may also be liable to others, either contractually or under the doctrines of tort law (a civil wrong for which the law imposes liability)."

  • Lisa J.
    June 10, 2008 8:40 p.m.

    My experiences at the U. Hospital have gotten worse over the years. Terrible service by staff and nurses. Place looks and (smells) old. Now this! My insurance allows me to get care elsewhere. I am done with the U. There's far better care in the state (Primary's, LDS Hospital and the new IMC hospital in Murray.

  • U Failed to Encrypt Date - Oops!
    June 10, 2008 8:25 p.m.

    Was this data encrypted or not? University Hospital won't say which means this data was unprotected. And whose idea was it to offer $1,000 for more than 2 million records of patients? They should be fired. All I saw today was cover up!!! Make University Hospital for this blunder!

  • Red
    June 10, 2008 6:57 p.m.

    It would have been a piece of cake to encrypt the information. It would then have been worthless to a thief.

    I'm afraid that people who collect personal information -- health care systems, stores, credit card companies, etc. -- won't routinely take this absurdly simple step until they're bludgeoned by some *very* hairy lawsuits.

  • Lindsay P.
    June 10, 2008 5:38 p.m.

    Over a week to notify people? are you kidding?

  • Mike F.
    June 10, 2008 5:04 p.m.

    Wow, $1,000 for 2.2 million medical records! Come on University Hospital. How cheap can you be! First you withhold this information to the public about the missing data for some time and then they come out with a measly $1,000 reward. Bet the thief can get much more than that on the black market! Yet one more reason why I don't use University Hospital.

  • Richard L.
    June 10, 2008 4:47 p.m.

    This is a serious identify theft issue that is being downplayed by the University of Utah Hospital staff. "Hospital officials pointed out that when data has been stolen from other hospitals, there has been not one clear case of identity theft as a result." How reassuring! Why did they wait almost 9 days before the public was notified of this theft?

  • Richard G.
    June 10, 2008 3:56 p.m.

    Lesson to be learned: Never EVER give you Social Security to a medical office. You do not have to do so, no matter what they say.