NCHHS OCRFirst filing
Filed Aug 19, 2016bd_bf88535a78130d83
Outer Banks Hospital (NC) reported to HHS on 2016-08-19 the loss of two unencrypted USB flash drives containing PHI of approximately 1,000 individuals during a facility move. Exposed data included names, addresses, birthdates, Social Security numbers, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, and the media. Corrective actions included workforce retraining, deployment of download-prevention technology, auto-encryption for portable media, and updated physical acquisition procedures. OCR obtained assurances of full remediation.
Affected (this filing): 1,000
HHS notified