A laptop containing files with information on more than 4,000 patients was taken from a UCSF medical school employee, officials said.
The laptop was stolen around Nov. 30. The university has been alerting the estimated 4,310 patients, letting them know that their protected health information is now vulnerable. UCSF police were notified Dec. 1 and the laptop was recovered Jan. 8.
Since then, UCSF Enterprise Information Security has conducted a review and determined the files had limited data relating to some patients and their treatment at the UCSF Medical Center in 2008 and 2009, according to the university. The employee had also uploaded some patient data from a previous employer.
The potentially exposed information included names, medical record numbers, age and clinical information, the university said.
There is no indication that there was unauthorized access to the files, however UCSF began sending out notifications to patients anyway.