Our Lady of the Angels Hospital (LA) reported to HHS on 2017-09-22 an Unauthorized Access/Disclosure affecting 1,140 individuals. A workforce member impermissibly accessed patients' PHI via Electronic Medical Records for more than three years. Breached information included clinical, demographic, and financial data. OCR investigated; the covered entity sanctioned the employee, implemented PHI access monitoring, retrained staff, updated its risk analysis, and provided affected individuals with one year of free credit monitoring.
Affected (this filing): 1,140