Zuckerberg San Francisco General (ZSFG) has announced a privacy breach involving a missing paper logbook containing protected health information. The logbook, which disappeared from a secure area of a clinic at the hospital around December 12, 2023, contained various patient details obtained between January 11, 2022, and December 12, 2023. This information includes patient names, dates of birth, medical record numbers, and additional health-related data.
Despite investigations, the location of the missing logbook remains unknown, and there is no evidence of misuse or unauthorized access to its contents. However, in compliance with federal and state laws, including HIPAA regulations, ZSFG has notified affected patients individually and reported the incident to relevant authorities, including the U.S. Department of Health and Human Services Office for Civil Rights (OCR) and the California Department of Public Health. Additionally, a notice has been posted on ZSFG’s website to inform the public.
In response to the breach, ZSFG is reinforcing its commitment to patient privacy by conducting policy reviews and providing additional security training to staff. Patients with concerns or questions regarding the incident are encouraged to contact the Privacy Office toll-free at (855) 729-6040, referencing Case #406 in their message.