Community Mercy Health Partners

Community Mercy Health Partners reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-01-28. 22 Massachusetts residents were affected. The report records the breach type as paper.

Community Mercy Health Partners (covered entity) reported to HHS OCR that law enforcement officials discovered paper records belonging to the CE in a dumpster, affecting 113,528 individuals. Records related to lab studies and contained demographic and clinical information including names, addresses, DOBs, driver's license info, SSNs, diagnoses, lab results, medications, and other treatment data. A subcontractor (Property Contractor) was responsible for the improper disposal. The CE provided notification, substitute web notice, and credit monitoring (for those with SSN/financial exposure), dismissed the subcontractor, retrained staff and the contractor, reduced long-term-storage records, and implemented new internal controls. OCR obtained assurances of corrective action.

Community Mercy Health Partners reported to HHS on 2015-04-27 a Unauthorized Access/Disclosure affecting 2000 individuals. Breached information located on Paper/Films. An individual was accidentally sent patient invoices due to human error involving institutional account guarantor information. The breach included demographic, financial, and clinical information of 1,999 individuals. The covered entity re-educated staff and revised payer processes.