RADY CHILDREN'S HOSPITAL SAN DIEGO

Rady Children's Hospital San Diego reported to HHS on 2020-02-21 a Unauthorized Access/Disclosure affecting 2360 individuals. Breached information located on Network Server. A vulnerability on the network server allowed ePHI (names, financial, and treatment info) to be accessible via the Internet. The entity notified HHS, individuals, and media, provided credit monitoring, and implemented additional safeguards.

Affected (this filing): 2,360

Rady Children's Hospital San Diego disclosed a data security incident occurring between June 20, 2019, and January 3, 2020. Unauthorized access via an Internet port exposed patient names, gender, imaging study details, and in some cases, dates of birth and medical record numbers. No SSNs, credit card numbers, or radiology images were compromised. The hospital engaged forensic investigators, notified regulators, and offered 12 months of Experian identity protection services.