Montefiore Medical Center (NYC non-profit hospital system) reported to HHS OCR on 2015-07-22 a Theft breach affecting 12,517 individuals. An employee stole ePHI from electronic medical records approximately two years prior (c. 2013) and sold it to an identity theft ring over a ~6-month period. NYPD notified Montefiore in May 2015. HHS OCR investigation resulted in a $4.75 million settlement and a corrective action plan. No business associate was involved.
Affected (this filing): 12,517