After reading "Massachusetts Clinic Breach Stems from Unauthorized
HIE Access", this seems like it was a state-wide thing that happened
to multiple facilities across the state. This is something that seems to
happen where many companies not just hospitals have a data breach
where the patient or customer's information may possibly be taken
by mistake. They send this as a head up so that the customer or
patient is aware of what happened and what should be done in order
to adjust this such as changing passwords, doing an identity theft
report to see if any information was taken or noticed. What should
be done in order to address this is get better security access and be
sure passwords are changed regularly and no unauthorized users are
having access to information. Massachusetts Clinic should follow the
standards of security of The HIPAA Security Rule this also sets
regulations. The facility needs a much more secure system in order to
keep their patient’s information safe and immediately notice any
changes and stop them if possible. The main goal should be to gain
the patients trust by ensuring their information safe and in a secure
setting where they won't have breaches and the information stolen.
