You Ask. We Investigate.®
Oregon man reveals massive Wisconsin patient privacy breach
UPDATE 03/12: United Healthcare tells TODAY'S TMJ4 the insurance company was not at fault in this case. Tyler Mason, a spokesman, maintains an investigation revealed the records were faxed from hospitals. It appears staffers may have misdialed the correct number by one digit.
"Community Memorial Hospital has been working very closely with United Healthcare to try and get to the bottom of this. We take this matter very seriously, as privacy is of utmost importance to us. Unfortunately, Mr. Butler is unwilling to share important documents and details critical to our investigation. I want to again emphasize that the faxed documents did not contain medical or financial information, including Social Security numbers. Community Memorial Hospital stopped faxing these forms to United Healthcare, and is continuing to investigate."
PORTLAND, Ore. – Stephen Butler lives in a suburb of Portland, but—for some reason—he reads documents from Wisconsin all too often.
“I know if I was in the hospital, I'd be a little ticked off," Butler said.
Those documents, sent to his home via fax, are medical records.
About a year ago, Butler tells me he received one transmission that caught his attention: sensitive paperwork that appeared to be coming from a (262) number.
The number is registered to Community Memorial Hospital in Menomonee Falls.
"It was a list of patient's names, [...] dates of birth, patient IDs, the dates they got admitted to the hospital and whether or not they were still in the hospital," Butler explained.
Butler claims he called the hospital a half dozen times over the past year and told them to stop.
The faxes, however, kept coming.
This week, another one arrived. Fed up, Butler called a patient listed on the document.
"She took my name and number, said she was very thankful that I called her, and she said she was going to talk to the hospital administration immediately,” Butler said.
Back in Wisconsin, we pressed the hospital for information. TODAY’S TMJ4 even gave them extra time to figure out where these faxes were coming from.
A spokeswoman for Froedtert Health, the company that runs Community Memorial Hospital, tells us their investigation revealed United Healthcare, an insurance provider, is behind the breach.
United Healthcare denied our request for an on-camera interview.
Kevin Shermach, the company’s director of public relations, sent us a statement:
“We were alerted by Froedtert Health about this issue earlier today, and we are working closely with them to investigate and determine the facts. We take very seriously the privacy and personal information of our members.”
Gene Brunner of Brookfield is a United Healthcare customer listed on one of the transmitted documents. We tracked him down using the information faxed to Stephen Butler's home.
Needless to say, he wasn't pleased by the lack of privacy.
"I want to keep my stuff private from anybody else. And where it's leaking from, I'd like to know, too,” Brunner said.
United Healthcare is looking into whether or not this was a computer glitch or human error.