Engagements

Accelerated breach reporting for 1M+ patient records

Expert, medical professional or surgeon searching the internet
Challenge:
CRA’s Forensic Services’ client, a large healthcare system in the Southern region of the United States, experienced a data breach incident that resulted in data exfiltration that may have exposed sensitive patient data. The impacted data population included more than 1 million files containing complex, structured data related to patients’ medical history. The client was working against a strict reporting timeline, and the files required complex, custom code to parse and compile the relevant information.
CRA approach:
CRA’s structured Data Analytics team conducted a programmatic scan to categorize the files by the various structures and formats within the data set. It then developed custom parsing scripts to extract and organize the data into a format suitable for reporting, targeting key data points such as names, medical record numbers, social security numbers, and address information. This was all done well within the client’s required reporting window.
Client impact:
At the completion of the project, CRA’s experts were able to leverage the extraction results, in conjunction with supplemental data provided by the client, to help the client quickly and efficiently notify individuals impacted by the data breach. The team provided unparalleled technical support and guidance throughout the legal compliance and reporting process. During the engagement, the Data Analytics experts maintained rigorous compliance with legal and regulatory requirements under the continuous guidance of external legal counsel. By delivering meticulous, efficient, and professional support, they significantly augmented investigative efforts, setting a benchmark in eDiscovery excellence.

Key contacts