Waipahu Aloha Clubhouse, Privacy Manager Breach

Waipahu Aloha Clubhouse (HI) reported to HHS OCR on 2012-10-31 an Unauthorized Access/Disclosure breach affecting 674 individuals. An unauthorized party remotely accessed a desktop computer containing PHI including names, addresses, dates of birth, and social security numbers (SSNs). The CE later confirmed the computer stored PHI of 170 individuals. Post-breach remediation included encrypting computers, updating passwords and security policies, and retraining employees. OCR provided technical assistance.