ILHHS OCRFirst filing
Filed Jan 11, 2014bd_3a916ab3ab822fc1
Cook County Health & Hospitals System (IL) reported to HHS on 2014-01-11 a breach of type 'Other' affecting 22,511 individuals. On November 12, 2013, a physician sent an unencrypted email with an Excel attachment containing PHI to a collaborator outside the organization's firewall, as part of a public health project with an academic medical center. PHI included demographic information and lab results. The attachment was unencrypted in violation of organizational policy. The CE disciplined the employee, implemented a new email security program, and retrained staff. OCR verified corrective actions.
Affected (this filing): 22,511
HHS notified