NYU Langone Hospitals

NYU Langone Hospitals reported to HHS on 2022-01-06 an Unauthorized Access/Disclosure affecting 1,141 individuals. An affiliated practice mailed PHI to the wrong recipients; the letters contained only the names of intended recipients. Breached information was located on Paper/Films. The entity notified HHS, affected individuals, the media, and posted substitute notice online. The affiliated practice subsequently strengthened its administrative safeguards.

NYU Langone Hospitals reported to HHS on 2020-10-30 a Hacking/IT Incident affecting 44009 individuals. Breached information located on Network Server. A business associate experienced a ransomware attack affecting ePHI including names, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, and the media.

NYU Hospitals Center reported to HHS on 2014-06-20 a Theft affecting 872 individuals. An employee's unencrypted laptop was stolen, containing ePHI including names, addresses, birthdates, clinical information, and medications prescribed. The covered entity implemented additional administrative safeguards as part of its mitigation efforts. Breached information was located on a Laptop. No business associate was involved.

NYU Hospitals Center (NY) reported to HHS OCR on 2010-07-07 that an unencrypted USB drive containing ePHI of 2,563 individuals was misplaced (reported internally as a possible theft). The ePHI included names, medical record numbers, ages, genders, procedures, physician names, anesthesia types, and recovery room timestamps. Following OCR's investigation, the CE halted unencrypted USB use, installed DLP software, updated physical security, purchased encrypted USB drives, revised its mobile device policy, and retrained all workforce members. Breached information located on Other Portable Electronic Device.