OU Medicine, Inc. d/b/a OU Health

OU Medicine, Inc., doing business as OU Health, experienced a data breach due to the theft of an employee’s laptop on December 26, 2022. This incident potentially compromised the protected health information of approximately 3,000 patients. The stolen laptop contained sensitive information, including patients’ names, Social Security numbers, driver’s license numbers, dates of birth, medical record numbers, account numbers, provider names, dates of service, diagnoses, treatment information, and health insurance details.

Following the discovery of the theft, OU Health initiated an investigation with law enforcement and cybersecurity experts to assess the extent and scope of the breach. The organization has taken steps to notify the affected individuals through mailed letters, advising them on measures to protect themselves from potential fraud and identity theft. These measures include placing fraud alerts or security freezes on their credit files, regularly monitoring their credit reports, and staying vigilant in reviewing financial account statements and explanations of benefits statements. Additionally, OU Health is offering complimentary credit monitoring services to those whose Social Security numbers were compromised

This incident is part of a broader challenge faced by OU Health, which has been grappling with financial difficulties. The organization has been dealing with a significant debt load, operational challenges, and the need for strategic adjustments to improve its financial health. These challenges have led to staff layoffs and efforts to increase patient-load obligations for physicians

In a separate but related matter, OU Health recently settled civil penalty claims for $140,000 due to allegations of recordkeeping violations,