Texas Health Arlington Memorial Hospital (Arlington, TX) reported to HHS OCR on 2011-03-23 an unauthorized disclosure affecting 654 individuals. The IT department activated a Business Associate Health Information Exchange (HIE) interface without patient notification or authorization. PHI transmitted included names, addresses, dates of birth, Social Security numbers, diagnoses/conditions, medications, lab results, other treatment info, and financial information. Breached information was located in Electronic Medical Records. Following the breach, the hospital revised IT processes, introduced a departmental checklist, and provided additional training to IT and registration staff.
Affected (this filing): 654