norm: utah department of healthno LEI · no CIKMax severity: Critical

Canonical registry

Utah Department of Health

ent_24efa02d7470daebd1bb24c3

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

780,000

as filed · HHS OCR UT

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Utah Department of Health
Normalized: utah department of health— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

UTHHS OCRas victim2012-04-11
OCR opened an investigation of covered entity Utah Department of Health after a hacker gained access to the network server of its business associate, Utah Department of Technology Services (DTS), and copied unencrypted ePHI of approximately 780,000 individuals to an IP address in Romania. Breached information was located on a Network Server and included names, addresses, birth dates, SSNs, physicians' names, and billing procedure codes. The CE notified HHS, individuals, and media, provided free credit monitoring, entered a BA agreement with DTS, and implemented encryption, improved firewalls, a new incident response plan, and a risk management plan. OCR obtained assurances of corrective actions.