City of Dubuque Vendor Reports Inadvertent Transfer of Personal Health Information

A vendor hired by the City of Dubuque to analyze Dubuque Fire Department ambulance service call data inadvertently transferred patients’ personal information to another City vendor. The information was shared via secured electronic transfer and this breach/compromise was not part of a “hack” or cyber-attack.

The personal information was acquired as part of Dubuque Fire Department emergency medical responses between Sept. 10, 2023, and Dec. 18, 2023. Upon discovery on Dec. 18, 2023, the information was immediately deleted by the receiving vendor and the inadvertent data transfers were immediately stopped. The receiving vendor investigated and confirmed the data was not accessed by anyone before its discovery and deletion.

The information shared may have included, but is not limited to:

  • personal information (name, address, driver’s license information, date of birth),
  • Social Security number (if gathered as part of the emergency medical response),
  • and protected health information (PHI).

The City of Dubuque has no evidence that any of the protected health information of patients has been or will be misused. Out of an abundance of caution, the City is notifying all individuals whose information was shared and is offering information on additional steps they can take if they have concerns.

The City is issuing this news release/public notice as required by the U.S. Department of Health and Human Services.

Weekly Ads

If the ad appears a little fuzzy, just click on it to view the ad.

Click here to view ads as a list.