MEMORIAL HEALTH SYSTEM

MEMORIAL HOSPITAL ASSOC. filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-080). The register records the breach as discovered on March 19, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Memorial Healthcare System (FL) reported to HHS on 2014-10-31 an Unauthorized Access/Disclosure affecting 1,782 individuals via Email. An employee sent a group email to current and former patients for a cancer awareness event but failed to mask recipients' email addresses, exposing names and an implicit indication of possible cancer treatment. The CE recalled the email, investigated immediately, notified HHS/patients/media, established a call center, counseled the involved employee, and revised its privacy program in March and September 2015.

Memorial Healthcare System (FL) reported to HHS OCR on 2014-10-30 an Unauthorized Access/Disclosure breach affecting 1,782 individuals. Breached information was located in Email. No business associate was identified as involved. No further details are available from the HHS web description.

Memorial Health System (Colorado) reported to HHS OCR on 2012-11-07 a Loss affecting 6,262 individuals. Breached information was located on Paper/Films. No business associate was involved. No further detail is available from the HHS web description.

Memorial Healthcare System (FL) reported to HHS OCR on 2012-08-16 a Theft incident affecting 105,646 individuals. Breached information was located on Electronic Medical Records. No business associate was identified as present. No further detail is available from the HHS web description.

Memorial Healthcare System (MHS) notified the NH Attorney General that employees of affiliated physicians improperly accessed patient information via a web portal. Discovery began April 27, 2012. Data accessed included names, DOBs, and SSNs during 2011-2012. 29 NH residents affected. MHS contacted law enforcement, offered 1 year of credit monitoring, and enhanced auditing controls. Investigation ongoing.

Memorial Healthcare System reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-04-17. 10 Massachusetts residents were affected. The report records the breach type as undefined.

Memorial Healthcare System reported to HHS on 2012-04-13 a breach affecting 115,143 individuals. The breach involved the impermissible access and disclosure of protected health information (PHI) by employees and affiliated physician office staff using valid login credentials. Affected data included names, dates of birth, and social security numbers. The incident occurred between April 2011 and April 2012. MHS settled with HHS for $5.5 million and agreed to a corrective action plan.

Memorial Healthcare System notified the NH Attorney General of an insider breach where two former employees improperly accessed patient PII (names, DOB, SSNs) for fraudulent tax returns. Incident discovered Jan 27, 2012. One NH resident affected. Remediation included policy refinement and enhanced auditing.

Memorial Health Systems reported to HHS on 2011-07-15 an Unauthorized Access/Disclosure affecting 2,330 individuals. A former nurse impermissibly accessed medical records between 2003 and May 2011 via the EHR system. Information located on Desktop Computer, Electronic Medical Record, Laptop, Network Server.