Paper Records Missing from Storage Facility According to Illinois Physicians Network

by | Dec 17, 2017

Many data breaches have been reported by HIPAA-covered entities, involving the loss or theft of physical records, in the past two months. In November, seven violations  involving paper records were made known to the HHS’ Office for Civil Rights, and another five incidents were made known the month prior to that.

Now another incident has been submitted in Illinois. Franciscan Physician Network of Illinois and Specialty Physicians of Illinois LLC have found that payment records that were kept in a storage center are missing. The storage center in Chicago Heights was used by both physician groups.

The loss/theft of the paper files is one of the largest violations of the past few months, potentially affecting as many as 22,000 people. The payment records were from the time period(s) 2015-2017 and 2010.

The boxes of paper files were confirmed as missing from their location on November 21, 2017, with notifications sent on December 13, 2017. The loss of files was found following a routine records request, but the records could not be found. An inventory of the storage facility was completed, and 40 boxes of files were seen to be missing and potentially stolen.

The records only included a small amount of patient information related to payments received, and included names and addresses, types of payment, payment amounts, office location, and the last four digits of credit card details. For a small number of patients who settled their bill by check, their routing number, bank account number and Social Security number were also included in the files.

A number of the records from 2010 may also have included insurance ID details, facility-assigned account details, dates of birth, type of visit, diagnoses, provider names and addresses, dates attended, descriptions of services provided, and procedure codes.

While the files may have been stolen, foul play is not suspected in this instance. As a precautionary measure, those impacted by the incident have been offered the chance to avail of two years of identity theft protection services for free.

Raise the level of HIPAA Awareness in your organization with Learner-Friendly, Comprehensive and Affordable HIPAA Training.


Please enable JavaScript in your browser to complete this form.

Patrick Kennedy

Patrick Kennedy is a highly accomplished journalist and editor with nearly two decades of experience in the field. With expertise in writing and editing content, Patrick has made significant contributions to various publications and organizations. Over the course of his career, Patrick has successfully managed teams of writers, overseeing the production of high-quality content and ensuring its adherence to professional standards. His exceptional leadership skills, combined with his deep understanding of journalistic principles, have allowed him to create cohesive and engaging narratives that resonate with readers. A notable area of specialization for Patrick lies in compliance, particularly in relation to HIPAA (Health Insurance Portability and Accountability Act). He has authored numerous articles delving into the complexities of compliance and its implications for various industries. Patrick's comprehensive understanding of HIPAA regulations has positioned him as a go-to expert, sought after for his insights and expertise in this field. Patrick's bachelors degree is from the University of Limerick and his master's degree in journalism is from Dublin City University. You can contact Patrick through his LinkedIn profile:

Raise the level of HIPAA Awareness in your organization with Learner-Friendly, Comprehensive and Affordable HIPAA Training.

Comprehensive HIPAA Training

Used in 1000+ Healthcare Organizations and 100+ Universities

    Full Course - Immediate Access

    Privacy Policy