Tri - State Surgical Associates Data Breach (2013)

Without the victim's knowledge or consent, and in violation of our office policies, a physician formerly associated with our practice requested that one of our administrative staff provide him with the names and contact information of our patients, presumably for purposes of notifying them of his new practice information. Without consulting a supervisor or anyone else in senior management, the employee complied and provided the physician with a hard copy print out of patient contact information.