Shands at UF

UF Health Central Florida reported to HHS on 2021-07-30 a Hacking/IT Incident affecting 700,934 individuals. Breached information located on Network Server. The incident involved a ransomware attack affecting electronic protected health information (ePHI) including names, dates of birth, addresses, clinical/treatment info, and SSNs. The entity notified HHS, affected individuals, and the media, and strengthened administrative, technical, and security safeguards.

Shands at UF (Shands at the University of Florida) reported to HHS OCR on 2010-03-01 a laptop theft affecting 12,580 individuals referred to its GI Clinical Services. A laptop was stolen from an employee's private residence, exposing patient names, Social Security numbers, and medical record numbers. The employee was counseled, suspended for 3 days, and given additional HIPAA training. OCR's investigation found no high-risk findings and confirmed existing safeguards including PGP whole disk encryption, encrypted USB drives, and secure VPN connections.