The Mount Sinai Hospital

MOUNT SINAI HOSPITAL filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-005). The register records the breach as discovered on October 6, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Mount Sinai Hospital reported to HHS on 2019-08-02 a Hacking/IT Incident affecting 33,730 individuals. Breached information located on Other. The breach involved its business associate, Retrieval-Masters Creditors Bureau, Inc. (AMCA), resulting in the exposure of ePHI including names, dates of service, clinical information, and health insurance information.

The Mount Sinai Hospital (NY) reported to HHS OCR on 2011-07-08 a Theft affecting 712 individuals. Two unencrypted laptop computers containing ePHI — including names, dates of birth, SSNs, diagnostic reports, and demographic information — were stolen from the CE's office. A police report was filed. Following OCR's investigation, the CE installed an exit alarm lock and surveillance camera, inventoried ePHI systems, and implemented policies covering workstation security, encryption, training, and media controls.