Jersey City Medical Center (NJ) reported to HHS on 2014-08-07 a Loss affecting 36,400 individuals. An unencrypted CD containing PHI — including demographic, clinical, and health insurance information — was sent via UPS overnight service and not delivered to the intended recipient for three months. The breached information was located on another portable electronic device. The CE notified HHS, media, and patients; offered free identity protection; and sanctioned the responsible employees. OCR confirmed corrective actions were implemented.
Affected (this filing): 36,400