What to Do If You Suspect a Breach

🕵️‍♂️ Why Quick Action Matters

No system is perfect. Even with good habits and strong safeguards, mistakes and threats can still happen. That’s why knowing how to respond to a potential breach is just as important as knowing how to prevent one.

A fast, well-informed response can protect patient data, reduce legal risk, and preserve your practice’s reputation.

🚨 What Counts as a “Security Incident”?

A security incident isn’t just a full-blown data breach. It can be any event that risks the safety of protected health information (PHI), including:

  • A lost or stolen laptop, phone, or USB drive

  • An email sent to the wrong patient or provider

  • Suspicious pop-ups or strange system behavior

  • Clicking on a phishing link

  • Unauthorized access to records by an employee

  • Conversations overheard by other patients

If something doesn’t seem right—assume it matters.

đź“Ł What You Should Do

If you suspect something’s wrong:

  1. Stop what you’re doing. Don’t keep using the device or system.

  2. Report it immediately to your practice manager, privacy officer, or IT support.

  3. Do not try to fix it yourself. Never delete files or send a follow-up email to “correct” a mistake—this can make things worse.

  4. Document what happened. Include time, device, type of data, and any people involved.

  5. Cooperate fully with any internal review or audit.

🧪 Real Example

A billing staff member emailed a patient’s test results to the wrong address. Instead of reporting it, she tried to resend it correctly and delete the original. The patient later complained, and the cover-up caused more damage than the mistake itself.

The practice had to notify all patients and pay thousands in fines. A simple report up front could have prevented most of it.

âť— Consequences of Inaction

Failing to report a potential breach can lead to:

  • Civil and criminal penalties

  • Patient lawsuits

  • HIPAA audits and enforcement

  • Mandatory breach notifications to HHS

  • Public loss of trust and media attention

You won’t get in trouble for reporting a mistake—but you might for hiding one.

âś… Quick Checklist

  • Report suspicious activity immediately

  • Don’t try to cover up or delete files

  • Follow your practice’s incident response plan

  • Document clearly and completely

  • Ask questions if you’re unsure—better safe than sorry

🧠 Final Thought

Reporting isn’t about blame—it’s about protection. Mistakes happen. What matters most is that you act quickly, honestly, and responsibly. You are not just protecting data—you’re protecting patients, your team, and your career.

Previous