University of California Irvine Medical Center

UC Irvine Medical Center discovered on March 13, 2015, that an employee accessed patient records without a job-related purpose between June 2011 and March 2015. The accessed data included names, dates of birth, medical record numbers, diagnoses, and employment status. Forensic investigation found no evidence of data removal. The employee's access was revoked, and law enforcement was notified. Credit monitoring was offered to affected patients.

University of California Irvine Medical Center (UCI) reported to HHS OCR on 2015-06-17 an unauthorized access/disclosure affecting 4,859 individuals. An employee impermissibly accessed patient medical records between June 2011 and March 2015. PHI exposed included names, addresses, claims information, dates of birth, gender, medical record numbers, account numbers, and clinical information, located in electronic medical records. UCI notified affected individuals and media, sanctioned staff, revised policies, and conducted a risk analysis per OCR investigation.

University of California Irvine Student Health Center experienced a malware incident involving keystroke loggers on three computers between Feb 14 and Mar 27, 2014. The malware captured and transmitted data including names, unencrypted medical information (diagnoses, insurance numbers), student IDs, addresses, phone numbers, and payment details (bank name, check numbers). The incident was discovered on Mar 26, 2014. Affected individuals were offered one year of credit and internet monitoring.