norm: umass memorial medicalno LEI · no CIKMax severity: Medium

Canonical registry

UMass Memorial Medical Group, Inc.

ent_1a99ac2830322cf5dcace04c

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

14,100

as filed · HHS OCR MA

Leak-site claims

0

none in sample

Identity resolution

Canonical name: UMass Memorial Medical Group, Inc.
Normalized: umass memorial medical— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

MASSACHUSETTSHHS OCRas victim2015-01-30
UMass Memorial Medical Group, Inc. (MA) reported to HHS OCR on 2015-01-30 an Unauthorized Access/Disclosure affecting 14,100 individuals. An employee impermissibly accessed patient PHI (paper/films) for approximately four months in 2014, using her legitimate job access for an unauthorized purpose. Breach notification was delayed at law enforcement's request. The employee was sanctioned and resigned. OCR's investigation led to new technical and physical safeguards, staff training, a third-party privacy review, and free credit monitoring for affected individuals.