At our inception 20 years ago, we chose to be different. Unlike other news organizations, we made the decision to provide in-depth, regional reporting free to anyone who wanted access to it. We don’t plan to change that model. Support from our readers will help us maintain and strengthen the editorial independence that is crucial to our mission to help make Western North Carolina a better place to call home. If you are able, please support The Smoky Mountain News.

The Smoky Mountain News is a wholly private corporation. Reader contributions support the journalistic mission of SMN to remain independent. Your support of SMN does not constitute a charitable donation. If you have a question about contributing to SMN, please contact us.

Haywood notifies clients of missing data report

Haywood County Health and Human Services Agency recently notified clients that an accounts receivable report went missing from a billing office several months ago.

Stoney Blevins, health and human services director, said HCHHSA discovered the report was missing on Oct. 31, and the administration subsequently launched an investigation into the incident that included the participation of the Haywood County Sheriff’s Office. 

Blevins said a billing worker had printed off a small subset of information from a larger state report as a working copy, and that the report went missing. The investigation is ongoing and remains a top priority for HCHHSA, but Blevins said he doesn’t know if the report is just missing or was stolen. 

“Our office is a double locked office, but I really don’t know — someone could have picked it up accidentally, but we’ve turned the office upside down trying to find it,” he said. 

Based on the investigation, HCHHSA determined that the report included North Carolina Health Information System (HIS) patient numbers; patient full names; a short descriptive caption identifying the HCHHSA clinic visited; and the amount in HCHHSA’s accounts receivable for each respective patient. 

The report did not contain patient addresses, Social Security numbers, medical records, or dates of birth. HCHHSA has received no indication that the information has been further used or disclosed. Blevins said it was very unlikely anyone would be able to decipher the report or do anything harmful with the information.

“If you didn’t work for the health department, you wouldn’t understand the report,” he said. 

A letter was sent to each patient on the report pursuant to the data event notification requirements of the U.S. Department of Health and Human Services. Blevins said HCHHSA takes the privacy and security of patient information seriously. 

Following this incident, HCHHSA is further enhancing security measures and its policies and procedures. While HCHHSA is not aware of any actual or attempted fraud or public disclosure as a result of this incident, HCHHSA encourages all concerned individuals to remain vigilant and to report any suspicious activity. 

“I feel comfortable that our citizens are pretty safe, but we don’t like it when a mistake is made,” Blevins said. “We took the high road and reported it and sent letters to every patient on the list.”

For additional information or if any citizen feels they have been adversely affected by this situation in any way, contact HCHHSA by phone at 888.452.6620, option 6 or by e-mail at This email address is being protected from spambots. You need JavaScript enabled to view it..

Go to top