PAHHS OCRFirst filing
Filed Nov 27, 2013bd_d8ecced71ce534d3
UPMC (PA) reported to HHS on 2013-11-27 an Unauthorized Access/Disclosure breach affecting 1,279 individuals. An employee impermissibly accessed PHI stored in Electronic Medical Records, including names, dates of birth, Social Security numbers, addresses, and clinical information. UPMC notified HHS, affected individuals, and the media. The employee was sanctioned and law enforcement was notified. OCR reviewed UPMC's risk analysis for Security Rule compliance.
Affected (this filing): 1,279
HHS notified