Log in

DATA BREACH: Time to take some responsibility

Posted

The June 2016 Banner Health data breach of 3.7 million confidential patient records occurred over two years ago. However, Banner Health has not been held accountable for their negligence.

Banner Health was hacked through their food sales computer system which shared the same computer system as the storage of their patients’ confidential financial and health information.Banner Health’s data breach was the largest health-related entity cyber-attack in 2016. The US Health & Human Services’ Office of Civil Rights is investigating Banner Health for a possible HIPAA fine for failing to protect individuals’ medical and personal information.

Carol received her Banner Health data breach letter four months late in mid-December 2016. Her Medicare was double billed for an old 10-year-old entry by hackers. She was unaware of the bill until she was refused medical service a week after she got her late Banner Health letter. This could have killed her since she is a transplant patient under strict medical supervision. This HIPAA violation was communicated to the Office of Civil Rights which will result in a large federal fine.

In fact, Banner Health disclosed in its 2017 annual report that their confidential information security was inadequate and that they expect a HIPAA fine. Mark’s Social Security number and both our email addresses are being sold on the Dark Web and being used in New York. These crimes have been reported to federal and state agencies.

A class action lawsuit is in progress against Banner Health and it is at the stage of gathering of actual damages for class members.

We have been attacked by hackers over 400 times and have spent over 1,200 hours fighting hackers. The hacking has resulted in money stolen from our checking account, having a duplicate Facebook account, having unauthorized credit applications, having to replace burned out routers, and being made members of foreign dating and college sites.

Banner Health has stated that they intend to continue to vigorously fight the class action lawsuit. Meanwhile, the stolen financial information victims of the Banner data breach suffer financially and physically from the time requirements needed to protect their credit. Once you are a victim of identity theft, you are at risk from hackers the rest of your life.

It is time for Banner Health to take responsibility for its negligence and damages it has caused by negligence. The fact that Banner Health is Arizona’s largest healthcare provider and employer has helped to delay the justice it should have received a long time ago.

Mark and Carol Fairall

SUN CITY WEST