Hawaii Pacific Health (a Business Associate) reported to HHS OCR on 2020-03-17 an Unauthorized Access/Disclosure affecting 3,772 individuals. A workforce member of an affiliated covered entity impermissibly accessed ePHI stored in Electronic Medical Records, including names, addresses, phone numbers, email addresses, dates of birth, religious affiliation, race/ethnicity, SSNs, health insurance information, and treatment information. The BA sanctioned the employee, notified affected individuals and media, offered credit monitoring, and implemented improved technical safeguards following an OCR investigation.
Affected (this filing): 3,772