News Release: Notification of Unauthorized Release of Personal Patient Information


Glen Barbour
Public Safety Information Officer, Fairfax County Health Department
703-246-8635, TTY 711

Notification of Unauthorized Release of Personal Patient Information

December 13, 2013

The Fairfax County Health Department has mailed letters to 1,499 Bailey's Health Center clients to inform them of an unauthorized disclosure of some protected health information (PHI).

View the letter to Bailey's Health Center clients. PDF icon

The Bailey's Health Center is one of the Fairfax County Health Department's three Community Health Care Network (CHCN) clinics. The Health Department contracts with Molina Healthcare, Inc. to manage CHCN clinics. Molina subcontracts with Health Business Systems, Inc. (HBS), which maintains a pharmacy database and provides prescription services to Bailey's Health Center patients. On October 18, 2013, HBS notified Molina that a computer file containing pharmaceutical records was inadvertently left on an unsecured computer server and accessed by three separate entities on four occasions between September 9, 2013 and October 3, 2013. Molina notified the Health Department on October 24, 2013.

The patient information that was improperly accessed included: name and address of the patient; pharmacy identification number of the patient; medication name and dosage; description of medication National Drug Code (NDC); payment information; prescriber’s name and address; and some patient social security numbers.

The Health Department has advised affected clients to take precautions, such as setting up fraud alerts and taking advantage of a free credit monitoring service.

Fairfax County takes the circumstances surrounding this breach of patient privacy very seriously. Although the County has in place multiple administrative requirements needed to protect health information in compliance with Health Insurance Portability and Accountability Act (HIPAA) this incident has lead us to review our current contract language and requirements related to the handling of pharmaceutical records to prevent such occurrences in the future. We plan to take further steps to safeguard our patient care records including a review of existing databases in order to confirm that all private patient information is secured on encrypted servers pursuant to Fairfax County policy. Fairfax County will continue to take all necessary steps to protect the personal information of patients of the CHCN.

Bailey's Health Center patients who would like more information about this specific breach of information may contact:

Robin Mullet, CHCN Assistant Program Manager
10777 Main Street, Suite 203, Fairfax, VA 22030
Phone: (703) 246-2962, TTY 711

Bailey's Health Center patients who require additional information concerning HIPAA patient rights or who believe that Fairfax County has not complied with HIPAA requirements in this action may contact:

Fairfax County Government HIPAA Compliance Program
George M. Ward, HIPAA Compliance Manager
12000 Government Center Parkway, Suite 527, Fairfax, VA 22035
Phone: (703) 324-4136, TTY (703) 968-0217

Secretary of the Federal Department of Health and Human Services (HHS)
Office for Civil Rights, Region III
U.S. Department of Health and Human Services
150 S. Independence Mall West, Suite 372, Philadelphia, PA 19106-3499
Phone: (215) 861-4441, TTY (215) 861-4440

Contact Fairfax County: Phone, Email or Twitter | Main Address: 12000 Government Center Parkway, Fairfax, VA 22035
Technical Questions: Web Administrator

ADA Accessibility | Website Accessibility
Awards | FOIA | Mobile | Using this Site | Web Disclaimer & Privacy Policy | Get Adobe Reader
Official site of the County of Fairfax, Virginia, © Copyright 2013

Website Feedback Website Feedback    Globe with various flags representing Web site language translations   Language Translations

Return to Graphic Version