University of Rochester Medical Center
ent_86e3ba6110d7bb2948840734
Disclosures
2
HHS OCR · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
857
nationwide · HHS OCR NY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- University of Rochester Medical Center
- Normalized
- university of rochester medical center— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- FEDERALHHS OCRas victim2013-05-06
The University of Rochester Medical Center & Affiliates reported a breach to HHS on May 6, 2013, after losing an unencrypted portable electronic device containing the protected health information of 537 individuals. An investigation by the HHS Office for Civil Rights (OCR) revealed systemic failures, including a lack of enterprise-wide risk analysis and failure to encrypt mobile devices. This incident, along with a similar one in 2017, resulted in a $3 million settlement with OCR and a mandated corrective action plan.
- NEW YORKHHS OCRas victim2010-09-07
University of Rochester Medical Center and Affiliates reported to HHS on 2010-09-07 a Loss affecting 857 individuals. Breached information located on Other Portable Electronic Device.