Yesterday I learned that my company had contracted with an Indian outsource firm, and their workers will have full access to our servers. This includes the personal health information of millions of patients as we are one of the largest healthcare providers in the U.S. ,and work exclusively with the elderly and most fragile populations. These workers which my company will have no oversight over will be able to access medical history, phone numbers, addresses, date of births, family information, insurance information, and most disturbing, SSNs. I am utterly shocked that my company would do this so nonchalantly. They even lied to employees and told them this was going to be automated service, never once telling us they were actually outsourced workers getting paid 1/4 what we are. I only discovered the truth on my own cause I know how to see who is working on what, and my boss came forward with the truth out of shame.
I am personally devasted that my company would do this to its patient's and employees. I contacted all my representatives and sent an email explaining what is happening and that this isn't ok. But, I really don't know what else to do as I haven't heard back from anyone.