University of Pennsylvania Health System

Clinical Practices of the University of Pennsylvania reported to HHS on 2025-06-30 a Unauthorized Access/Disclosure affecting 1432 individuals. Breached information located on Paper/Films.

Penn Medicine reported to HHS on 2019-05-21 an Unauthorized Access/Disclosure affecting 917 individuals. Breached information located on Electronic Medical Record. An employee of a staffing agency impermissibly accessed and used patient PHI including names, DOB, SSN, and clinical information.

Penn Medicine reported to HHS on 2018-01-02 a Theft affecting 1,050 individuals. An unencrypted laptop was stolen from an employee. PHI involved included names, dates of birth, claims information, and treatment information. The CE implemented additional administrative and security safeguards and retrained staff on patient privacy and safeguarding PHI. Breached information located on Laptop.

University of Pennsylvania Health System reported to HHS on 2014-07-16 a Theft affecting 661 individuals. A bag containing a CD-ROM was stolen from a physician's vehicle. The CD-ROM contained names, dates of birth, SSNs, medical histories, and treatment information of approximately 2,046 individuals. The CE filed a police report, notified affected individuals, HHS, and media, and retrained the physician. OCR's investigation resulted in substitute notification and confirmed corrective actions.