IT | Security

HHS Posts Updated Health Breach List

By: Absolute Team | 7/29/2011

As required by the HITECH Act, a list of breaches of unsecured protected health information (PHI) affecting 500 or more individuals is available online. The US Department of Health & Human Services has now improved that list to include summaries of the breaches (location of breached information, type of breach) and have made this information available in multiple formats.

There are currently 292 records available in the list and, from analysis of this data, we can gather that:

  • A total of 11,404,950 people had their PHI breached (of course, there may be overlap) in 292 breach incidents
  • The top 4 breaches affected more than 1 million people each
  • Theft accounted for more breaches than loss or hacking
  • Laptops and portable electronic devices were most often the source of the breach

Although they don't auto-generate nice graphs to summarize this information (a pity), you can download the information into Excel to tabulate some statistics if you so wish.