Skin and Cancer Center of Arizona reported to HHS on 2015-09-21 an Unauthorized Access/Disclosure affecting 3,311 individuals. A former employee retained PHI after her employment ended on March 18, 2015, and further disclosed it to her new employer. Breached data included patient names, dates of birth, telephone numbers, insurance company names, and appointment reasons (Paper/Films). OCR investigated; the CE retrieved all PHI, ensured cessation of further use, retrained staff, implemented HIPAA reminders, and enhanced physical security. OCR confirmed corrective actions were implemented.
Affected (this filing): 3,311