Download Notice of Privacy Incident Ambucor Health Solutions (“Ambucor”), a

Notice of Privacy Incident
Ambucor Health Solutions (“Ambucor”), a remote monitoring labor service for cardiac devices utilized by
Cardiology Consultants of Philadelphia, discovered that thumb drives recovered from a former
employee contained some personal information of this customer’s patients. The personal information
may have included patient’s name, date of birth, home address, phone number, medications, race,
testing data, patient identification number, medical device information such as the manufacturer,
diagnosis, Ambucor enrollment number, Ambucor enrollment date, Ambucor technician name,
physician name(s), and the name and address of the practice where the patient was seen. Social Security
number, insurance, Medicaid/Medicare and financial information were NOT included.
During an investigation into the former employee’s activities, Ambucor determined that he had
downloaded information from a company-issued computer to thumb drives and retained those drives
on March 17, 2016 shortly before his employment ended. In a related investigation, federal law
enforcement authorities provided Ambucor with two thumb drives turned over by the former
employee.
Ambucor discovered in July 2016 that the thumb drives likely contained patient data. In September
2016, after completing a detailed review of forensic and other information, Ambucor was able to
determine that personal data on the drives was patient data. Ambucor began notifying affected
customers on September 24, 2016.
As of this writing, Ambucor has received no indication that any personal data has been misused.
However, out of an abundance of caution, Ambucor has offered potentially affected patients one year of
identity protection services and, if necessary, related recovery services and $1 million of identity theft
insurance at no cost. Patients should consider activating the identity protection services.
Cardiology Consultants of Philadelphia appreciates the importance of protecting the privacy and security
of personal information and deeply regrets any inconvenience or concern this incident may cause its
patients. Ambucor officials have also confirmed they are taking steps to prevent this type of incident
from occurring again, including a thorough review of and updates to all HIPAA security processes.
For questions, additional details or more information about steps one can take to prevent any potential
harm, contact Ambucor’s dedicated call center at 866-313-7993.