About their Hidden Costs – I’m Talking PHI Breaches
If the rumor is true about Bluebell Ice Cream’s “e-claim-only” dental benefit plan that is to go into effect in March, how many in the east-central Texas town of Brenham (pop. 16,000) will be properly warned about the danger to themselves, their families and Bluebell officials’ reputations because of reckless policy?
Transmissions Risks
Each time their dentists send an electronic dental claim (e-claim) over the internet to insurance employees in Chicago as a favor to a patient – and especially the insurer – the Bluebell employee’s digital medical identity which is worth fifty bucks on the black market, rides along to destinations unknown. It’s my guess that very few Bluebell employees are yet aware of the increasing risk of medical identity theft from dentists’ e-claims – much less given the opportunity to opt out of the risk by simply visiting a dentist who still uses the telephone, fax and US Mail.
Security Risks Growing
It certainly won’t improve my popularity with 9 out of 10 dentists for saying this, but risks of identity theft from HIPAA-covered dental offices are climbing daily. In the introduction to a recent interview with Larry Ponemon, chairman and founder of the Ponemon Institute, GovernmentIT.com editor Tom Sullivan ominously described the ever-increasing risk of a massive “data spill” of perhaps millions of patients’ protected health information (PHI):
“The street value of health information is 50 times greater than that of other data types. Even worse, the healthcare industry is among the weakest at protecting such information. With organized criminals trying to steal medical IDs, sloppy mistakes becoming more commonplace, mobile devices serving as single sign-on gateways to records and even bioterrorism now a factor, healthcare is ripe for some a wake-up call – one that just might come in the form a damaging ‘data spill.’” (See: “Q&A: How a health ‘data spill’ could be more damaging than what BP did to the Gulf.”
Tom Sullivan – Editor [December 05, 2011]
http://govhealthit.com/news/qa-how-health-data-spill-could-be-worse-what-bp-did-gulf?page=0,0
According to Dr. Ponemon:
“The basic issue, when you think about data theft not data loss – because it’s hard to know whether that lost data ultimately ends up in the hands of the cybercriminal and all of these bad things occur – but in the case of identity theft, the end goal has been historically to steal a person’s identity, and just like getting a financial record, getting a health record probably has your credit card, debit card, and payment information contained in that record.”
Of Credit Cards … and More!
But that’s not all. Credit cards are just chump change. He continues:
“The financial records are actually lucrative for the bad guy, but the health record is actually much, much more valuable item because it not only gives you the financial information but it also contains the health credential, and it’s very hard to detect a medical identity theft. What we’ve found in our studies is that medical identity theft is likely to be on the rise and, of course, there’s an awareness within the healthcare organizations that participate in our study that they’re starting to see this as more of a medical identity theft crime. It’s not just about stealing credit cards and buying goodies, it’s about stealing who you are, possibly getting medical treatment and, therefore, messing up your medical record.”
Dr. Ponemon suggests that the victim may not know about the theft until he or she “stumbles on something that alerts them their medical identity was stolen.” Perhaps something like death following anaphylactic shock from a medication that was once digitally highlighted as “Allergic to.” Understandably, Ponemon adds that respondents recognized altered medical histories as an emerging threat they believed was affecting the patients in their organizations. Such danger for dental patients is almost non-existent if their dentists simply don’t put PHI on office computers.
Should a data breach of Bluebell Ice Cream employees’ identities occur in Brenham or Chicago, which is more likely than not, the fact that electronic dental records do nothing to improve the quality of dental care won’t make Brenham citizens any happier with local Bluebell officials.
Conclusion
And so, your thoughts and comments on this ME-P are appreciated. Please review our top-left column, and top-right sidebar materials, links, URLs and related websites, too. Then, subscribe to the ME-P. It is fast, free and secure.
Link: http://feeds.feedburner.com/HealthcareFinancialsthePostForcxos
Speaker: If you need a moderator or speaker for an upcoming event, Dr. David E. Marcinko; MBA – Publisher-in-Chief of the Medical Executive-Post – is available for seminar or speaking engagements. Contact: MarcinkoAdvisors@msn.com
Our Other Print Books and Related Information Sources:
Health Dictionary Series: http://www.springerpub.com/Search/marcinko
Practice Management: http://www.springerpub.com/product/9780826105752
Physician Financial Planning: http://www.jbpub.com/catalog/0763745790
Medical Risk Management: http://www.jbpub.com/catalog/9780763733421
Healthcare Organizations: www.HealthcareFinancials.com
Physician Advisors: www.CertifiedMedicalPlanner.com
Subscribe Now: Did you like this Medical Executive-Post, or find it helpful, interesting and informative? Want to get the latest ME-Ps delivered to your email box each morning? Just subscribe using the link below. You can unsubscribe at any time. Security is assured.
Link: http://feeds.feedburner.com/HealthcareFinancialsthePostForcxos
Sponsors Welcomed: And, credible sponsors and like-minded advertisers are always welcomed.
Link: https://healthcarefinancials.wordpress.com/2007/11/11/advertise
Filed under: Health Insurance, Health Law & Policy, Information Technology, Practice Management, Pruitt's Platform | Tagged: D. Kellus Pruitt DDS, eDRs, EMRs, HIPAA, PHI, Ponemon Institute, protected health information |
















Alerting Dr. Faiella
With the aid of Sharecare.com’s “Help Request Form” that consumers are invited to use to ask ADA dental experts questions, I sent the following heads-up to the President-elect:
Dear Dr. Robert Faiella:
Even though you appear to me to be too shy to be capable of being an expert on anything, I suppose you will be the most likely spokesperson. So I’ll ask you: Should patients’ risk of identity thefts from dental offices suddenly become a hot topic for a week or so in the popular media – perhaps following a data breach from a dental office involving famous and/or powerful people’s PHI – how will you handle Fox News questions comparing the safety of paper dental records with EDRs?
Remember, you have a long history of pushing members to quickly purchase expensive EDR systems while ignoring their concerns about security. Since lying about their safety outside of ADA Headquarters is no longer an option, are you prepared to apologize for misleading America’s dentists who once believed what your said?
Good luck as ADA President next year.
D. Kellus Pruitt DDS
LikeLike