Central Brooklyn Medical Group, PC

Between January 1 and April 18, 2015, an employed physician at Central Brooklyn Medical Group, PC (Brooklyn, NY) impermissibly disclosed PHI of ~500 patients to former medical assistants via fax on multiple occasions. In one instance, a transposed fax number sent the PHI of 88 patients to an unrelated third party. PHI involved: names, ages, sex, appointment dates/times/reasons, physician names, and medical conditions. The CE notified 4,223 individuals, sanctioned the physician, confirmed PHI destruction, retrained staff, and reported the physician to NY's Office for Professional Medical Conduct. OCR obtained corrective-action assurances.

Central Brooklyn Medical Group, PC (also known as Preferred Health Partners) reported to HHS OCR on 2010-02-25 a Theft affecting 500 individuals. Appointment schedules, pathology reports, and portions of medical records — including names, ages, telephone numbers, SSNs, medical insurance information, and other clinical data — were stolen from an office. PHI was located on paper/films. The CE filed a police report, cooperated with law enforcement, and undertook extensive remediation including locked storage, shredding, electronic verification, off-site archiving, and HIPAA retraining.