All case studies

Where keeping it cost them

Hospital websites / Meta

Sent appointment details through a tracking pixel

Healthcare providers passed appointment details, medical conditions and physician information to Facebook through analytics tags nobody had reviewed.

Removed: nothing. Tracking pixels stayed on the pages and kept forwarding appointment details, medical conditions and physician information.

Outcome: HIPAA-protected data left the providers’ systems through tags that “nobody thought about”.

The 2022 Meta Pixel hospital case revealed that healthcare providers inadvertently sent appointment details, medical conditions, and physician information to Facebook due to excessive analytics integration.

HIPAA-protected data was being exfiltrated through tracking pixels that “nobody thought about.”

Source: The Markup, Facebook is receiving sensitive medical information from hospital websites (16 June 2022)