KY measles database revealed patient information, state officials say

Patient information for Kentuckians with confirmed cases of measles reported on the state’s disease dashboard was publicly accessible in September. 

On Sept. 23, the “security vulnerability” was discovered, which “made some private patient information accessible to the public,” cabinet spokeswoman Beth Fisher said in a statement. 

“Cabinet for Health and Family Services staff were quickly notified and took action to secure the information and prevent further public access,” Fisher said. 

It’s unclear how many people’s information may have been exposed. The cabinet is currently investigating the issue “to determine its scope,” she said, and “once the review is completed, the cabinet will make all notifications required by state and federal law.” 

At the time of the exposure, there were fewer than 100 measles cases confirmed. 

There are now more than 200 cases in Kentucky, the most since 1991. That year, Kentucky had 443 cases, according to the Centers for Disease Control and Prevention, and they were mostly in children younger than five. 

Measles is extremely contagious and spread through the air from coughs or sneezes, according to the CDC. One infected person can infect nine in 10 unprotected people around them. 

Symptoms include fever, cough, runny nose, red eyes and a rash. The best protection against measles is the measles vaccination, which is generally available at pharmacies and through medical providers. 

The CDC recommends the measles vaccination series at 12-15 months and then at 4-6 years old.