CALIFORNIAHHS OCRFirst filing
Filed Jul 28, 2014bd_285bc6ab5282de71
Dr. Veronica Joann Barber (VB), an optometrist working at the covered entity under a space-sharing agreement, copied the CE's entire patient database on December 15, 2013, and used the ePHI to solicit patients for her own practice. The breach affected 4,000 individuals. Exposed ePHI included names, SSNs, addresses, driver's licenses, dates of birth, credit card/bank account numbers, claims information, diagnoses, medications, and treatment information. The CE terminated the agreement, issued a cease-and-desist, notified HHS and individuals, installed firewalls, completed a risk assessment, and improved physical and logical access controls. Breached info located on Network Server.
Affected (this filing): 4,000
HHS notified