The Fairfax County Health Department has mailed letters to 1,499 clients of the Bailey's Health Center, located in Falls Church, to inform them of an unauthorized disclosure of some protected health information.
The Bailey's Health Center is one of the Fairfax County Health Department's three Community Health Care Network (CHCN) clinics. The Health Department contracts with Molina Healthcare, Inc. to manage CHCN clinics. Molina subcontracts with Health Business Systems, Inc. (HBS), which maintains a pharmacy database and provides prescription services to Bailey's Health Center patients.
On Oct. 18, HBS notified Molina that a computer file containing pharmaceutical records was "inadvertently left on an unsecured computer server" and accessed by three separate entities on four occasions between Sept. 9 and Oct. 3. Molina notified the Fairfax County Health Department on Oct. 24.
The patient information that was improperly accessed included: name and address of the patient; pharmacy identification number of the patient; medication name and dosage; description of medications' National Drug Code; payment information; prescriber’s name and address; and some patient social security numbers.
The Health Department has advised affected clients to take precautions, such as setting up fraud alerts and taking advantage of a free credit monitoring service.
"Fairfax County takes the circumstances surrounding this breach of patient privacy very seriously," the County said in a statement. "Although the County has in place multiple administrative requirements needed to protect health information in compliance with Health Insurance Portability and Accountability Act (HIPAA), this incident has lead us to review our current contract language and requirements related to the handling of pharmaceutical records to prevent such occurrences in the future."
"We plan to take further steps to safeguard our patient care records including a review of existing databases in order to confirm that all private patient information is secured on encrypted servers pursuant to Fairfax County policy," the statement continued. "Fairfax County will continue to take all necessary steps to protect the personal information of patients of the CHCN."
Bailey's Health Center patients who would like more information about this specific breach of information may contact:
Robin Mullet, CHCN Assistant Program Manager
10777 Main Street, Suite 203, Fairfax, VA 22030
Phone: (703) 246-2962, TTY 711
Bailey's Health Center patients who require additional information concerning HIPAA patient rights or who believe that Fairfax County has not complied with HIPAA requirements in this action may contact:
Fairfax County Government HIPAA Compliance Program
George M. Ward, HIPAA Compliance Manager
12000 Government Center Parkway, Suite 527, Fairfax, VA 22035
Phone: (703) 324-4136, TTY (703) 968-0217
Secretary of the Federal Department of Health and Human Services (HHS)
Office for Civil Rights, Region III
U.S. Department of Health and Human Services
150 S. Independence Mall West, Suite 372, Philadelphia, PA 19106-3499
Phone: (215) 861-4441, TTY (215) 861-4440
What do you think of this breach? Tell us in the comments below.