Children's National Medical Center (DC) reported to HHS on 2016-04-25 an Unauthorized Access/Disclosure affecting 4,107 individuals. A former business associate, Ascend Health System, misconfigured an FTP site, potentially exposing transcription documents via the internet. Breached PHI included children's names, dates of birth, medications, and physicians' names. The breach was discovered in December 2015; the CE had ceased business with the BA on June 23, 2014. Notification was provided to HHS, affected individuals, and the media.
Affected (this filing): 4,107