Orlando Health, Inc.
ent_019e0cbe51bc5021edf870da50c9e97b
Disclosures
3
HHS OCR · 1 jurisdiction
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
3,662
nationwide · HHS OCR FL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Orlando Health, Inc.
- Normalized
- orlando health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300TMK1PZT9ZBF098
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- orlandohealth.com
Disclosure history (3)newest first
- FLHHS OCRas victim2022-11-18
Orlando Health reported to HHS on 2022-11-18 a Hacking/IT Incident affecting 3662 individuals. Breached information located on Email.
- FLHHS OCRas victim2015-07-02
Orlando Health (FL) reported to HHS OCR on 2015-07-02 an Unauthorized Access/Disclosure affecting 3,421 individuals. Discovered during an audit on May 27, 2015, an employee was found to be accessing patient PHI — including names, dates of birth, and clinical records — outside the scope of her employment via Electronic Medical Record systems. The employee was terminated. Corrective actions included workforce retraining and credit monitoring for affected individuals. OCR obtained assurances of corrective action.
- FLHHS OCRas victim2014-03-24
Orlando Health, Inc. (FL) reported to HHS on 2014-03-24 a Loss affecting 586 individuals. An unencrypted portable data drive was lost by a pharmacy resident of Arnold Palmer Hospital, part of Orlando Health. The drive contained PHI of 586 babies (all minors), including names, birth weights, gestational age, admission/discharge dates, medical record numbers, and some transfer dates. The CE notified HHS, media, and parents of the minors; posted substitute notice; updated DLP policies; and retrained staff. OCR obtained assurances of corrective action implementation.