PEACEHEALTH

PeaceHealth reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-12-16. 2 Massachusetts residents were affected. The report records the breach type as electronic.

PeaceHealth Southwest Medical Center (WA) reported to HHS on 2017-09-19 an Unauthorized Access/Disclosure affecting 1,969 individuals. A nurse impermissibly accessed patients' electronic medical records without a business reason. Breached PHI included demographic and clinical information. The CE revoked the employee's access, audited records, sanctioned the employee, reported them to the WA State Board of Nursing, and implemented new technical safeguards. OCR obtained assurances of corrective action completion.

PeaceHealth submitted a supplemental notice to the Washington Attorney General regarding a data breach involving a former employee who accessed patient information via third-party insurance portals from June 15 to October 12, 2015. The incident, first discovered on October 9, 2015, exposed names, DOBs, addresses, insurance info, and some SSNs. 812 Washington residents were notified on December 14, 2015.

PeaceHealth reported to HHS on 2015-11-30 a Unauthorized Access/Disclosure affecting 1407 individuals. Breached information located on Other. A former employee accessed patient ePHI via third-party portals.