MCNDH Substitute Notice
Notice to our clients about a HIPAA breach incident
This notice is to inform our patients of a HIPAA breach that involved patient information. The Muscogee Creek Nation Department of Health takes the security of our patient information seriously, and we regret any inconvenience this may cause.
What happened?
On April 25, 2022, a reported incident took place at the Muscogee Creek Nation Medical Center in Okmulgee, Oklahoma. The EVS staff placed protected health information in the regular trash from the Quality and Infection Control office shred bin containing the protected health information.
The MCN Privacy Officer promptly initiated an investigation amongst MCN Health staff. The investigation was unable to determine the identities and total number of patient information that was contained within the shred bin. This investigation did determine proper destruction of PHI did not occur. We are not aware of any misuse of any patient health information at this time.
What information was involved?
Specifically, the incident may have resulted in the disclosure of patient’s financial information and claim information, audit information, name, date of birth, and address. The investigation estimated 50 to 100 patients possibly breached.
What are we doing?
We are publicly notifying our MCNDH patients in accordance with all federal guidelines as identified by 45 C.F. R 164.404(a) (Notice to Individuals), 45 C.F. R 164.404(d)(2) (Substitute Notice).
In addition, we have taken steps to prevent this type of event from occurring again, including using proper secure locking shred bin containers for all offices, and providing additional HIPAA training to employees.
Where to go for more information
As a preventative step, you may want to contact the three U.S. credit-reporting agencies: Equifax, Experian, and Trans Union to obtain a free credit report from each by calling 1 (877) 322-8228 or log onto www.annualcreditreport.com for further information. The HIPAA Privacy Rule provides Federal protections for Protected Health Information. To learn more about your rights as a patient, please visit: www.hhs.gov.
Should you have any questions or require further assistance about how this incident may have affected you, please call (918) 756-4233 extension 4438 or (918) 752-8351 for the MCNDH Privacy Officer.