Phoenixville Hospital (PA) reported to HHS OCR that an employee impermissibly accessed the protected health information of 934 individuals stored on a desktop computer. PHI included names, addresses, dates of birth, financial information, diagnoses, lab results, medications, and other treatment information. The hospital sanctioned the employee, offered complimentary credit monitoring, implemented additional administrative safeguards, notified HHS/affected individuals/media, provided substitute notice, and stood up a call center.
Affected (this filing): 934