Pennsylvania-based company Einstein Health Network announced a breach of its employee email system. The company waited more than five months to make the compromise public. Einstein is in violation of the the the HHS 60-day breach notification rule, but unlikely to face penalty. Einstein said it wasn t able to figure out whether the contents of patient-related emails were stolen but is taking steps to alert patients who might have had everything from their name, date of birth and even diagnoses and prescriptions exposed to criminals. A lack of tough enforcement of healthcare security could be behind Einstein s delay in reporting.
Source: https://threatpost.com/einstein-healthcare-network-announces-august-breach/163237/