Gregory D. Evans | Ex-Hacker | TV Personality | Author

RICHLAND — Kadlec Regional Medical Center officials announced Wednesday that patients are being notified that one of the hospital’s computer servers containing brain scan and other patient studies was hacked in September.

Files housed on the server included information with a patient’s name, birth date, age, gender, medical record number and doctor’s name, but did not include any patient financial information, address, Social Security number or insurance data.

Kadlec officials first discovered the unauthorized access during routine monitoring of computer network backups Nov. 11, according to a news release.

Kadlec immediately removed the server from service and hired a national company that specializes in computer security to investigate the cause of the incident and scope of the breach.

The analysis confirmed there was unauthorized access to one of Kadlec’s 225 servers sometime around Sept. 15. Forensic experts found no evidence that patient data actually was viewed, compromised or removed from the system.

As a precaution, Kadlec is sending a letter to all patients whose information was on the files on the affected server.

“We take our responsibility to protect patient information very seriously,” said Rand Wortman, president and CEO of Kadlec Health System. “This incident was unique, and we apologize for any concern or inconvenience it may cause patients and their families.”

Hospital officials said it has added significant security measures to Kadlec’s servers to help prevent future breaches.

“While it may be impossible to completely thwart skilled and determined hackers from ‘parking’ on unauthorized servers, we will take all necessary steps to review and strengthen internal procedures to ensure Kadlec provides the highest level of data security possible,” Wortman said.

Kadlec’s notice to patients encouraged them to be vigilant and to notify the hospital immediately if they notice any unusual activity. The hospital is providing all patients whose information was contained in files on the server with identity theft safeguards, officials said.

In addition to contacting affected patients, Kadlec informed the federal Department of Health and Human Services.

– Michelle Dupler: 582-1543; mdupler@tricityherald.com

Similar stories:

HACKED: Kadlec notifying patients of computer server breach

HACKED: Kadlec notifying patients of computer server breach

Kadlec Regional Medical Center officials announced today that patients are being notified that one of the hospital’s computer servers containing brain scan and other patient studies was hacked in September.

Files housed on the server included information including a patient’s name, birth date, age, gender, medical record number and doctor’s name, but did not include any patient financial information, address, social security number or insurance data.

Kadlec officials first discovered the unauthorized access during routine monitoring of computer network backups on Nov. 11, according to a news release.
55 extra beds for Kadlec, none for KGH

55 extra beds for Kadlec, none for KGH

OLYMPIA ? Kadlec Regional Medical Center — 55. Kennewick General Hospital — 0.

That’s the number of new beds the state told each of the hospitals Wednesday they would be awarded from applications filed a year ago.

Kadlec had asked to add 114 beds and KGH wanted 25.
Database tracks hospitals’ surgical infection rates

Database tracks hospitals’ surgical infection rates

Patients at Washington hospitals now have a new tool for evaluating quality of care, with a database tracking information about surgical infection rates unveiled Tuesday

The Washington State Hospital Association released the data, which was compiled in response to legislation passed in 2007 and 2010.

“Washington’s hospitals are enthusiastic participants in providing this new information about surgical infection rates,” said Carol Wagner, the association’s vice president for patient safety.
Fake White House holiday e-mail is cyber attack

Fake White House holiday e-mail is cyber attack

A malware-laden e-mail masquerading as a White House Christmas card was a sinister move by hackers to steal sensitive documents from U.S. law enforcement and military officials, according to cybersecurity analysts.
WikiLeaks subpoenas spill out into public realm

WikiLeaks subpoenas spill out into public realm

Investigative documents in the WikiLeaks probe spilled out into the public domain Saturday for the first time, pointing to the Obama administration’s determination to assemble a criminal case no matter how long it takes and how far afield authorities have to go.