norm: grm information managementno LEI · no CIKMax severity: Critical

Canonical registry

GRM Information Management Services

ent_db7e4597070cd2d47d6c71a7

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

1,700,000

as filed · HHS OCR NJ

Leak-site claims

0

none in sample

Identity resolution

Canonical name: GRM Information Management Services
Normalized: grm information management— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

NJHHS OCRas victim2011-02-11
Unencrypted clinical system backup tapes containing ePHI of 1,700,000 individuals were stolen from an unlocked vehicle belonging to an employee of GRM Information Management Services, a business associate of the covered entity. ePHI included names, MRNs, SSNs, addresses, phone numbers, health plan numbers, dates of birth/admission/treatment/discharge/death, mother's name, next of kin, and clinical information (diagnoses, treatment, prognosis, lab results, medications). The covered entity filed a police report, notified HHS, media, and affected individuals, terminated the BA agreement, and installed encryption software on backup media following OCR's investigation. Incident occurred prior to the September 23, 2013 HIPAA Omnibus compliance date.