Unsatisfied with other vendors’ work to determine breached data subject to notification requirements, healthcare company sought new data breach response provider.

Challenge

• After a large data breach that compromised patient records, healthcare facility needed to quickly identify Protected Health Information (PHI) exposed in the incident
• Two other vendors failed to determine the pertinent data due to flawed search techniques
• Breached material included hundreds of thousands of low-quality PDFs and images containing massive amounts of PHI data

Solution

• Elevate’s data mining process combined Canopy’s AI and machine learning technologies and Elevate-customised search terms tailored to the customer’s unique requirements
• Elevate provided review team to sample thousands of documents across each document type and PII/PHI category
• Elevate’s methodology furnished breach counsel breakdowns of the types of PHI documents within the data set and document counts for each PHI type and revealed that the majority of documents contained extensive PHI for multiple individuals