Update: Providence Data Loss Case
Back in late 2005, a car prowler stole unencrypted computerized medical records of 365,000 Providence Health System patients from an employee’s car. We filed a case here in Portland on behalf of the 365,000 patients, and the trial judge granted Providence’s motion to dismiss the claim. We appealed and recently filed our opening brief with the Oregon Court of Appeals.
I co-authored the brief with my friend and colleague, Brian Campf. Here is a pdf version:
Providence Class Action: Patients’ Opening Brief Oregon Court of Appeals
Appeals move at their own pace. I don’t expect a decision from the Court of Appeals until 2009.
David Sugerman
Tags: appeal, class action, Providence Data Loss
May 20th, 2008 at 9:17 am
My husband Mark and I were very concerned when this first happened. I still have a problem with why they thought it was good practice to send home information with employee’s. I think that is stupid. I would never be allowed to take confidential information home from my job. I keep praying that Providence would take more responsiblity in this. Thanks for all your hard work. Your doing a great job.
May 20th, 2008 at 1:58 pm
It’s slow, isn’t it? Thanks for your kind words and your patience.
David Sugerman
May 20th, 2008 at 2:16 pm
I know I signed 6 different HIPA statements at that hospital. I am still mad. I looked up the penalties for each violation of that agreement and it said they could be fined $20,000.00 per occurance. The fact that they tried to hide it makes me very angry. Good thing our neighbors to the north had legislation on the books about when and how we are to be notified.
May 22nd, 2008 at 3:19 pm
I also appreciate your work on this case and that you are filing an appeal. In December my credit card was compromised during a transaction on the web. After researching the fraudulent charges it was apparent the perpetrators had significant personal information
about me. Four months later another credit card was compromised that “only” my husband uses and I am just a secondary person on the card. This card was issued where we do our banking. It was a card used locally, but the compromise was done using my identification. The pertetrators were able to access our account history, tried to change our address to another state, change the name on the account and charged $600 in fraudulent charges.
After this breach occured I spoke with you, Mr. Sugerman, and questioned whether this compromise could have come from the data that was stolen. I am now retired but was an employee in the division at Providence where the data was maintained. I had more information about myself on those tapes.
It is a concern and being compromised twice in four months is not a pleasant
experience and you feel very vunerable.
I certainly hope the appeal is successful.
April 12th, 2009 at 7:59 pm
Just grabbed the feed… thanks for posting this.