Shands at UF

UF Health Central Florida reported to HHS on 2021-07-30 a Hacking/IT Incident affecting 700,934 individuals. Breached information located on Network Server. The incident involved a ransomware attack affecting electronic protected health information (ePHI) including names, dates of birth, addresses, clinical/treatment info, and SSNs. The entity notified HHS, affected individuals, and the media, and strengthened administrative, technical, and security safeguards.

Shands Teaching Hospitals and Clinics, Inc. reported to HHS on 2021-05-07 a Unauthorized Access/Disclosure affecting 1562 individuals. Breached information located on Electronic Medical Record. An employee impermissibly accessed PHI including names, addresses, phone numbers, dates of birth, diagnoses, and lab/imaging results.

UF Health Shands reported to HHS on 2020-06-12 a Hacking/IT Incident affecting 13146 individuals. Breached information located on Email. The covered entity's business associate experienced a ransomware attack. This case is closed and consolidated into an existing investigation.

Shands Lake Shore Regional Medical Center reported to HHS on 2020-04-27 a Unauthorized Access/Disclosure affecting 651 individuals. Breached information located on Paper/Films. A tornado struck the medical records storage facility leased by its business associate, disclosing PHI including names, SSNs, addresses, DOBs, medical record numbers, financial info, diagnoses, and medications. The CE notified HHS, individuals, and media, offered identity theft prevention services, and the BA securely destroyed remaining records.

Shands at UF (Shands at the University of Florida) reported to HHS OCR on 2010-03-01 a laptop theft affecting 12,580 individuals referred to its GI Clinical Services. A laptop was stolen from an employee's private residence, exposing patient names, Social Security numbers, and medical record numbers. The employee was counseled, suspended for 3 days, and given additional HIPAA training. OCR's investigation found no high-risk findings and confirmed existing safeguards including PGP whole disk encryption, encrypted USB drives, and secure VPN connections.