RADY CHILDREN'S HOSPITAL SAN DIEGO

Rady's Children's Hospital - San Diego reported a data breach to the Montana Attorney General. The breach was reported on 2020-10-30. The breach occurred from 2/7/2020 to 6/4/2020. 6 Montana residents were affected.

Rady Children’s Hospital – San Diego reported to HHS on 2020-10-30 a Hacking/IT Incident affecting 19,837 individuals. Breached information located on Network Server. The covered entity's business associate experienced a ransomware attack affecting ePHI including names, addresses, dates of birth, clinical information, and financial information. The CE offered complimentary credit monitoring and identity theft protection services.

Rady Children's Hospital San Diego reported to HHS on 2020-02-21 a Unauthorized Access/Disclosure affecting 2360 individuals. Breached information located on Network Server. A vulnerability on the network server allowed ePHI (names, financial, and treatment info) to be accessible via the Internet. The entity notified HHS, individuals, and media, provided credit monitoring, and implemented additional safeguards.

Rady Children's Hospital San Diego disclosed a data security incident occurring between June 20, 2019, and January 3, 2020. Unauthorized access via an Internet port exposed patient names, gender, imaging study details, and in some cases, dates of birth and medical record numbers. No SSNs, credit card numbers, or radiology images were compromised. The hospital engaged forensic investigators, notified regulators, and offered 12 months of Experian identity protection services.

Rady Children's Hospital-San Diego disclosed a privacy event where a CD containing patient health information (names, DOB, medical records) was inadvertently sent to a third-party contractor for Quality Control on March 29, 2018. The hospital discovered the error on April 12, 2018, and recovered the CD. No SSN or credit card data was involved. The incident was reported to the California Department of Public Health.

Rady Children's Hospital - San Diego reported to HHS OCR on 2014-06-25 an Unauthorized Access/Disclosure breach affecting 6,307 individuals. Breached information was located on Email and Other media. No business associate was identified as involved. The web description was not provided; further details of the unauthorized access or disclosure are not publicly available from this filing.

Rady Children's Hospital - San Diego reported to HHS on 2014-06-24 a Unauthorized Access/Disclosure affecting 14121 individuals. Breached information located on Email.

Rady Children's Hospital-San Diego reported a breach involving unauthorized access to patient records. The incident involved the compromise of valid credentials, affecting data spanning from 2009 to 2011. Records accessed included names, addresses, and government-issued ID numbers. The breach was reported to the California Attorney General in June 2014.