MEMORIAL HERMANN HEALTH SYSTEM

Memorial Hermann Health System (TX) reported to HHS OCR on 2021-03-31 an Unauthorized Access/Disclosure affecting 1,893 individuals. A business associate employee uploaded PHI to the Internet, making it publicly viewable. Exposed data included names, addresses, dates of birth, Social Security numbers, diagnoses, claims, health insurance information, and other treatment information. Breached information was located on a Network Server. The BA offered credit monitoring and implemented additional technical safeguards.

Memorial Hermann Health System reported to HHS on 2019-07-02 a Unauthorized Access/Disclosure affecting 507 individuals. Breached information located on Email. A workforce member inadvertently emailed a spreadsheet containing PHI (names, medical record numbers, financial/insurance info, clinical info). The CE sanctioned the employee, revised procedures, and contacted the recipient to ensure deletion.

Memorial Hermann Health System reported to HHS on 2019-05-13 a Unauthorized Access/Disclosure affecting 604 individuals. Breached information located on Electronic Medical Record, Email. An employee fraudulently used patient financial information for personal use.

Memorial Hermann Health System (MHHS), a not-for-profit health system in Southeast Texas, agreed to pay $2.4 million to HHS to settle potential HIPAA Privacy Rule violations involving the disclosure of patient information. MHHS also adopted a comprehensive corrective action plan.

Memorial Hermann Health System reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-09-03. 1 Massachusetts residents were affected.

Memorial Hermann Health System reported to HHS on 2014-08-29 a Unauthorized Access/Disclosure affecting 10,604 individuals. Breached information located on Desktop Computer. A workforce member inappropriately accessed PHI.