Queen of the Valley Medical Center remains under investigation by the California Department of Public Health following last year’s patient data breach.
The data breach became publicly known this past April, when a class action lawsuit was filed in Sonoma County against St. Joseph Health System, operator of Queen of the Valley.
The Department of Public Health is conducting its own investigation separate from the lawsuit. The department’s spokesman, Ralph Montano, reported this week that the investigation is “ongoing” and no further details could be released.
The lawsuit, filed by two patients who were treated in Santa Rosa, seeks $1,000 per patient — equal to about $31.8 million — for allowing the personal health information of more than 31,800 patients statewide to be accessible over the Internet for nearly a year.
Queen of the Valley notified 4,263 patients of the data breach in February. Notices also were sent to patients of four other St. Joseph Health System hospitals: Santa Rosa Memorial Hospital, Petaluma Valley Hospital, St. Jude Medical Center (Fullerton) and Mission Hospital (Mission Viejo, Laguna Beach).