norm: cheasapeake regional information system for our patients inc crispno LEI · no CIKMax severity: Medium

Canonical registry

Cheasapeake Regional Information System for our Patients, Inc. (CRISP)

ent_c1b9b9db096853e2e3de67ea

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

8,008

as filed · HHS OCR MD

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Cheasapeake Regional Information System for our Patients, Inc. (CRISP)
Normalized: cheasapeake regional information system for our patients inc crisp— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

MARYLANDHHS OCRas victim2024-10-11
CRISP, a Maryland-based health information exchange acting as a business associate, reported that an employee made the protected health information of 8,008 individuals — including diagnoses, medications, claims, and other treatment information — viewable by unauthorized individuals. The BA notified HHS and affected individuals, implemented additional technical safeguards, and retrained staff.