Oregon Health and Science University Hospital, Portland, is notifying families of a data breach after a USB drive that contained information on 14,300 patients and 195 employees was stolen.
The breach affected premature pediatric patients who had been screened for vision problems, the hospital said in a news release. The data included names, addresses and a brief summary of medical information for the patients affected. A total of 702 families whose files included more personal information were mailed a letter about the situation.
Employee information included names, addresses, Social Security numbers and employment-related vaccination information.
The hospital described most of the data on the USB drive as "very limited in scope" and added that it is password-protected and can be opened only using software not found on most personal computers.
The theft occurred last month during a burglary of an employee's home. The USB drive was in the employee's briefcase, which was stolen in the home invasion, according to the hospital. For that reason, the hospital suggested that the USB drive likely wasn't the intended target.