BOSTON (AP) - Attorney General Maura Healey says McLean Hospital will implement new security measures and pay a fine after a data breach exposed sensitive health information.
Healey said Wednesday that McLean Hospital Corporation agreed to adopt new security and training programs and pay $75,000 to resolve claims it exposed the personal and health information of more than 1,500 people in a research program.
Healey’s court complaint alleges McLean, a psychiatric hospital in Belmont, let an employee regularly take home eight unencrypted backup tapes containing information of patients, employees and deceased donors from the Harvard Brain Tissue Resource Center. Healey says the employee was terminated in 2015 and only returned four of the tapes.
The hospital says it has continued to enhance its privacy and security practices, and the agreement with Healey is a continuation of those efforts.
Please read our comment policy before commenting.