Houston Methodist Hospital

Houston Methodist Hospital reported to HHS on 2020-04-17 a Theft affecting 1987 individuals. Breached information located on Other Portable Electronic Device. The incident involved the burglary of external storage drives containing ePHI (names, DOB, treatment info) belonging to a business associate employee.

Houston Methodist Hospital (TX) reported to HHS OCR on 2017-09-25 an Unauthorized Access/Disclosure affecting 1,359 individuals. A workforce member sent an email to patients without using the BCC field, exposing recipients' email addresses to one another. Breached information was located in Email. The CE notified HHS, affected individuals, and the media, updated technical safeguards, and retrained staff. OCR obtained assurances of corrective action implementation.

Houston Methodist Hospital reported to HHS on 2017-03-17 a Unauthorized Access/Disclosure affecting 1417 individuals. Breached information located on Email. A workforce member erroneously sent an email disclosing the protected health information (PHI) of 1,417 patients to other patients listed on the email. The CE provided breach notification to HHS, affected individuals, and the media. In response to the incident, the CE implemented an additional technical safeguard to prevent similar situations and re-trained its workforce members on the proper use of email when communicating with patients.

Houston Methodist Hospital (Houston, TX) reported to HHS OCR on 2014-01-02 a Theft incident affecting 1,341 individuals. Breached information was located on Paper/Films. No business associate was identified as involved. No further detail was available in the web description.