Geisinger Wyoming Valley Medical Center

Geisinger Wyoming Valley Medical Center (PA) reported to HHS on 2020-05-18 an Unauthorized Access/Disclosure affecting 805 individuals. A workforce member impermissibly accessed ePHI stored in Electronic Medical Records, including names, dates of birth, addresses, phone numbers, email addresses, Social Security numbers, diagnoses, lab results, medications, and other treatment information. The CE sanctioned the responsible employees and implemented additional administrative safeguards.

Geisinger Bloomsburg Hospital reported to HHS OCR on 2014-01-23 a Loss affecting 3,101 individuals. Archived PHI on Paper/Films could not be located after the hospital was acquired by Geisinger, though copies were available. No evidence of impermissible disclosure or theft. OCR provided breach notification guidance. The CE notified the website, media, and patients, and re-trained staff on PHI safeguards and disposal. No business associate was involved.

Geisinger Wyoming Valley Medical Center (PA) reported to HHS OCR on 2010-12-28 a Theft/insider misuse incident affecting 2,928 individuals. A staff physician emailed PHI—including names, addresses, dates of birth, SSNs, and medication information—to his personal home email account while working on an analysis. The CE sanctioned the physician, implemented auto-encryption for PHI emailed externally, improved physical safeguards, and retrained staff following OCR investigation. Breached information was located on Email.