1,350 Butler County employees affected by HIPAA breach

Butler County Commissioner: ‘No internal lists will ever be kept again.’


A Butler County employee inadvertently sent out an email with wellness information regarding the county’s health insurance, and that might have violated HIPAA laws.

The county’s wellness coordinator Shawna Smith sent out an email in September that included a spreadsheet that had hidden columns that included some employee information that may have violated federal HIPAA laws. A notice went out Tuesday to 1,350 employees impacted by the possible breach.

RELATED: Butler County judge dismisses airport lawsuit

The spreadsheet, according to Human Resources Director Laurie Murphy’s letter, included names, insurance identification numbers and information about the employee’s participation in the county Wellness Program. She noted the information isn’t sensitive — no passwords, social security numbers — but warned them to be vigilant.

“Although the risk of harm to participants is low since the information was generally not sensitive in nature, participants whose PHI (protected health information) was improperly distributed should take steps to monitor the use of their health insurance to prevent fraudulent use by third parties,” Murphy wrote.

The warning was a bit of “overkill” Murphy told the Journal-News, but recommended by the attorney they hired to look into the matter, that is now under federal investigation by the Department of Health and Human Services.

“If there was some nefarious individual out there connecting the name to the health insurance identification number, it’s highly, highly unlikely, but the attorney just wanted me to put that in there,” Murphy said.

County Administrator Charlie Young told the Journal-News they have exercised the utmost caution in this situation because it involves federal HIPAA laws. He said he doesn’t believe there will be ramifications from the federal government.

“There’s always a possibility,” Young said. “Our attorney that we retained for this purpose doesn’t believe that there will be or should be. Our attorney has advised us we’ve done all the things we should do in responding once we discovered it. Would not expect to see any penalties or repercussions.”

MORE: Butler County health insurance saga finally over

Young said there was no “malicious intent,” but they will be discussing whether any form of discipline is warranted.

Commissioner T.C. Rogers said it was an unfortunate situation, but he is not worried employees are at risk.

“It wasn’t malicious,” he said. “And we’re not even in the same jeopardy as these large banks where they breach their security information.”

The county is in the throes of negotiating a new health insurance contract with United Healthcare — a process that caused some consternation among the three commissioners — and Commissioner Cindy Carpenter says that new plan will prohibit breaches in the future.

Under the current system, the county kept track of the wellness program internally via the spreadsheet. Under the new plan — that has yet to be ratified — she said the employees have personalized accounts that they control.

“I’m very, very confident that our new health insurance company will not allow anything like that to happen,” she said. “No internal lists will ever be kept again.”



Reader Comments


Next Up in Local

Advocates: Warren County widow’s case a big win for Ohio seniors
Advocates: Warren County widow’s case a big win for Ohio seniors

An 81-year-old Warren County widow’s win in the Ohio Supreme Court will have far-reaching implications for other surviving spouses facing bills for the care of loved ones who die, advocates for seniors said. The Ohio Supreme Court ruled Wednesday in favor of Cora Bell in a lawsuit filed in June 2015 against her in Franklin Municipal Court about...
WPAFB Thursday Weather: Chance for light showers as gradual warm-up continues
WPAFB Thursday Weather: Chance for light showers as gradual warm-up continues

A chilly morning with temperatures rising through the 30s, according to Storm Center 7 Chief Meteorologist McCall Vrydaghs. Skies will be mostly cloudy all day with a slight chance for a few sprinkles. Temperatures will moderate into the middle 40s for highs, which is slightly above normal. A few more sprinkles are possible Thursday night, but a better...
Dayton area businessman in court today on illegal dumping charges
Dayton area businessman in court today on illegal dumping charges

A prominent Dayton area philanthropist and one of his managers are set to appear in court today on several felony charges involving his businesses. Steve R. Rauch and Jennifer Copeland have been summoned to be appear in Montgomery County Common Pleas Court, where they were indicted last month on illegal dumping and related charges, court records show...
Police: 58-year-old man abducted at gunpoint back home safe in Dayton
Police: 58-year-old man abducted at gunpoint back home safe in Dayton

The 58-year-old man is back home, but his vehicle is still missing. The man is safe and was able to walk back to his house in the 600 block of Gramont Avenue, police said. The victim, whose name was not released, was abducted at gunpoint by two men who also robbed him of his mid-size sport-utility vehicle, a red 2002 Oldsmobile Bravada with Ohio plates...
Rolling Stones rocker Keith Richards says he’s giving up drinking; ‘I got fed up with it’
Rolling Stones rocker Keith Richards says he’s giving up drinking; ‘I got fed up with it’

Longtime Rolling Stones rocker Keith Richards said he’s been drinking less and less over the past year and finally just “pulled the plug on it.” >> Read more trending news  The Stones guitarist and founding band member, who turns 75 next week, told Rolling Stone magazine, “I just got fed up with it.” He said...
More Stories