The Children's Hospital of Philadelphia

The Children's Hospital of Philadelphia (CHOP) reported to HHS on 2018-10-23 a Hacking/IT Incident affecting 5,368 individuals. On August 23, 2019, a phishing email sent to 679 Outlook users enabled an unauthorized actor to access a physician's email account and the accounts of five employees who forwarded work email externally. The compromised account contained PHI including demographic and clinical information of approximately 5,368 patients. CHOP responded by disabling the account, recalling phishing emails, blocking the phishing site, resetting credentials, notifying affected individuals, and offering credit monitoring. Staff phishing training and a risk assessment update followed. OCR obtained documented assurances of corrective action.

Children's Hospital of Philadelphia (CHOP) reported a data breach to the Montana Attorney General. The breach was reported on 2018-10-23. The breach occurred from 8/23/2018 to 8/24/2018. 1 Montana residents were affected.

The Children's Hospital of Philadelphia (CHOP), a PA-based Healthcare Provider, reported to HHS OCR on 2009-11-24 a Theft breach affecting 943 individuals. A laptop was stolen from a hospital employee's vehicle. The device contained PHI including names, contact information, dates of birth, Social Security numbers, medical record numbers, diagnosis codes, and billing code descriptions. CHOP completed laptop encryption, revised its security policies, and retrained staff. OCR obtained assurances of corrective action. Breached information located on Laptop.