Notice to Baylor Dallas Patients of Employee Unauthorized Access Incident
Baylor Dallas is committed to protecting the security and confidentiality of our patients' information. Regrettably, this notice is about an incident involving some of that information.
An internal investigation that took place from Jan. 10, 2018, through March 1, 2018, revealed that a Baylor Dallas employee accessed patient medical records without appropriate authorization between Aug. 31, 2017, and Dec. 6, 2017. Baylor Dallas confirmed that the employee accessed certain demographic information (such as patients' names and dates of birth), medical record numbers, hospital account numbers, physicians' names and limited clinical information (including diagnosis/conditions, lab test results and medications) related to admissions at Baylor Dallas. Other information that may have been accessed in some patients' medical records included Social Security numbers.
This incident did not affect all Baylor Dallas patients, but only certain patients who were admitted to Baylor Dallas between June 27, 2016, and Dec. 4, 2017. In compliance with applicable laws, Baylor Dallas sent letters and notified affected patients from Jan, 26, 2018, through March 2, 2018.
Baylor Dallas has no indication that any of the information has been further disclosed or used by any other unauthorized individuals or entities. However, out of an abundance of caution, Baylor Dallas offered eligible patients one year of credit monitoring and identity restoration services through Experian.
If you did not receive a letter (by March 20, 2018) and believe you may have been affected, please call us toll-free at 866.218.6920, Monday through Friday, between 8 a.m. and 5 p.m. Central Standard Time.
We regret any inconvenience or concern caused by this incident. Baylor Dallas has taken necessary corrective actions to safeguard against similar incidents in the future, including dismissal of the employee who inappropriately accessed patient information and retraining of staff on the appropriate procedures to follow when accessing patient health information.