Hampton Roads, VA (December 2012) - Omnicell, Inc. (“Omnicell”) provides automated medication dispensing services on behalf of various healthcare providers, including Sentara Healthcare (“Sentara”). In providing these services, Omnicell is entrusted with patient information. Omnicell takes its obligation to protect patient information seriously. Regrettably, this notice is regarding an incident involving some of that information.
On November 15, 2012, Omnicell learned that an Omnicell device containing some Sentara Healthcare patient information was stolen on the night of November 14th from an Omnicell employee’s locked car. A police report was filed, but the device has not been recovered. Omnicell advised Sentara Healthcare of the incident on November 20, 2012.
Omnicell’s investigation concluded that the device may have contained clinical and demographic information about Sentara patients, including patient name, birth date, patient number and medical record number. Additionally, one or more of the following clinical information may have been involved:
Gender; allergies; admission date and/or discharge date; physician name; patient type (i.e., inpatient, emergency department or outpatient); site and area of the hospital (e.g., specific inpatient or outpatient unit/area); room number; medication name; and medication dose amount and rate, route (e.g., oral, infusion, etc.), frequency, administration instructions, and start time and/or stop time.
Patient medical records were not on the device, and patient medical information has not been lost. Also, no financial, bank account information, Social Security number, or insurance information pertaining to any Sentara patient was on the device.
The incident affected only certain patients treated between October 18, 2012 and November 9, 2012 at Sentara CarePlex, Sentara Leigh Hospital, Sentara Norfolk General Hospital, Sentara Obici Hospital, Sentara Princess Anne Hospital, Sentara Virginia Beach General Hospital, Sentara Williamsburg Regional Medical Center, Sentara BelleHarbour, Sentara Independence, and Sentara Port Warwick.
While Omnicell has no reason to believe that the device was taken for the information it contained, or that the information has been accessed or used improperly, out of an abundance of caution, Omnicell began sending letters to affected patients on December 31, 2012. Omnicell is also providing a dedicated call center to answer questions for those affected.
If you believe you are affected but do not receive a letter by January 21, 2013, please call 1-855-755-8482, Monday through Friday between 8 a.m. and 5 p.m. Eastern time and enter the 10-digit reference code 6236121712 when prompted. Due to the holidays, the call center will be closed on January 1, 2013.
Omnicell deeply regrets any inconvenience this may cause. Omnicell is cooperating with local authorities to locate the stolen device and secure all patient information. In addition, Omnicell is taking steps to improve its security programs and practices in response to this incident. Omnicell has assured its healthcare providers that it has taken steps to prevent such an incident from happening in the future, including technology changes and re-education of its employees.
For more information regarding Omnicell, Inc., please visit www.omnicell.com.
For Press questions please contact our media pager at 757-671-4971.