Roswell Park Comprehensive Cancer Center

Roswell Park Comprehensive Cancer Center (NY) reported to HHS OCR on 2025-02-24 a Theft incident affecting 11,435 individuals. Breached information was located on another portable electronic device. PHI involved included names, dates of birth, and clinical information. The CE notified HHS and affected individuals, and implemented additional administrative, technical, and security safeguards in response.

Roswell Park Comprehensive Cancer Center (NY) reported to HHS on 2024-02-14 a Hacking/IT Incident affecting 755 individuals. Breached information was located in Email. PHI involved included names, medical record numbers, dates of birth, and health insurance and other treatment information. The CE notified HHS, affected individuals, and the media, and implemented additional administrative, technical, and security safeguards and retrained staff.

Roswell Park Comprehensive Cancer Center reported to HHS on 2020-09-14 a Hacking/IT Incident affecting 149,126 individuals. Breached information located on Network Server. A business associate experienced a ransomware attack affecting ePHI including names, addresses, emails, DOBs, and diagnoses. The CE notified HHS, individuals, and media.

Roswell Park Comprehensive Cancer Center (NY) reported to HHS on 2019-10-18 an Unauthorized Access/Disclosure affecting 584 individuals. An employee impermissibly accessed ePHI stored in Electronic Medical Records, including names, birthdates, diagnoses, treatment information, and medications prescribed. The CE sanctioned the responsible employee, revised its policies and procedures, and OCR obtained assurances of corrective action. No business associate was involved.