norm: suny upstate medical universityUSno LEI · no CIKMax severity: Medium

Canonical registry

SUNY Upstate Medical University

ent_0225e1aef0b9541a20bacc80

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

1,216

nationwide · HHS OCR NY

Leak-site claims

0

none in sample

Identity resolution

Canonical name: SUNY Upstate Medical University
Normalized: suny upstate medical university— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

NEW YORKHHS OCRas victim2018-11-09
SUNY Upstate Medical University reported to HHS on 2018-11-09 a Unauthorized Access/Disclosure affecting 1216 individuals. Breached information located on Electronic Medical Record. An employee impermissibly accessed medical records of 1,216 individuals, exposing PHI including names, addresses, birthdates, health insurance, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, and the media, and implemented corrective actions including policy updates and staff retraining.