Jackson Health System

Public Health Trust of Miami Dade County DBA Jackson Health System reported to HHS on 2025-06-06 a Unauthorized Access/Disclosure affecting 2599 individuals. Breached information located on Electronic Medical Record.

HHS OCR imposed a $2,154,000 civil money penalty on Jackson Health System (JHS), a nonprofit academic medical system in Miami, Florida, for HIPAA Security and Breach Notification Rule violations occurring between 2013 and 2016.

Jackson Health System (JHS), a nonprofit academic medical system in Miami, FL, reported to HHS OCR on 2013-08-22 a Loss of paper/films affecting 1,471 individuals. JHS's Health Information Management Department lost paper records containing patient PHI in December 2012 and January 2013. OCR ultimately imposed a civil money penalty of $2,154,000 for multiple HIPAA violations (2013–2016), including delayed breach notification, failure to conduct risk analyses, and failure to restrict workforce access to ePHI.

Jackson Health System (FL) reported to HHS on 2013-02-13 a breach (type: Other) affecting 566 individuals. Federal law enforcement notified the CE on March 21, 2012 that a volunteer at Jackson North Medical Center photographed paper documents containing PHI — including names, SSNs, addresses, and birthdates — allegedly for use in an identity theft scheme. Breached information was located on Paper/Films. The CE notified affected individuals, offered free credit monitoring, and implemented corrective actions including revised HIPAA policies and enhanced volunteer oversight. OCR obtained assurances of compliance.

Jackson Health System reported to HHS on 2011-07-08 an Unauthorized Access/Disclosure affecting 1,562 individuals. Breached information located on Electronic Medical Record. An employee removed PHI including names, addresses, DOBs, and SSNs for identity theft.