This is an archived article that was published on sltrib.com in 2008, and information in the article may be outdated. It is provided only for personal research purposes and may not be reprinted.
Just days after the University of Utah Hospitals and Clinics announced the theft of 2.2 million patients' billing records containing a variety of personal information, the first lawsuit over the debacle has been filed.
In a proposed class-action lawsuit filed Wednesday in 3rd District Court, former patient Patrick M. Beamish claims Perpetual Storage Inc. negligently allowed the records to be stolen, exposing him to the risk of identity theft.
Beamish's attorney, Karra Porter, said Friday her client and other patients need immediate credit monitoring. Although the university has said it will provide free credit monitoring for a year to those whose Social Security numbers were compromised, Porter claimed that is not long enough.
Porter also wants the storage company to fund any credit repair, legal counsel and technical support for any patients whose identities are actually misused.
"We want to make sure everyone is protected," she said. "You can't just hope for the best."
The university announced Tuesday that a Perpetual Storage courier picked up tapes from the hospital containing the records, but did not immediately transport them to the company's storage vault in Little Cottonwood Canyon.
Instead, the courier violated company policy by leaving the records in his personal vehicle overnight outside his home in Kearns. In the early hours of June 2, a thief broke into the vehicle and stole a metal box containing the tapes.
A $1,000 reward is being offered for return of the tapes, but they were still missing Friday, according to Salt Lake County sheriff's Deputy Levi Hughes.
Porter said that while massive losses or thefts of personal data are not unheard of, this case is "fairly unique" because of its size and the "potentially sensitive" information the records contained.
The stolen patient information may include driver license numbers, birth dates, physicians' names, insurance providers and medical procedure codes from patients over the last 16 years. Social Security numbers were also listed for 1.3 million patient records.
Porter said her firm, Christensen & Jensen, also plans to sue the university on behalf of Beamish. "As a courtesy to the U., we are holding off on that," Porter said. "We anticipate filing a notice of claim against the U. on Monday."
Representatives for Perpetual Storage Inc. declined to comment on the lawsuit Friday.
* The cost of mailing the letters has been estimated at $500,000, Rasmussen said.
* A Web site has been set up to answer questions related to the theft: http://healthcare.utah.edu/
billingrecordstheft; or call the help line, 866-581-3599.