CALIFORNIAHHS OCRFirst filing
Filed May 31, 2017bd_11425d672160c000
A workforce member of Advanced ENT Head & Neck Surgery (CA) surreptitiously photographed patients, recorded conversations, copied legal ID and payment records, stole multiple mobile devices containing ePHI, and posted breached information to a social media account. The breach, discovered ~May 1, 2017, affected ~15,000 individuals. PHI involved clinical, demographic, and financial information across desktop computers, EMRs, email, laptops, portable devices, and paper/films. The CE terminated the employee, notified HHS and other enforcement agencies, and implemented encryption, password, and physical security improvements. OCR closed its investigation after the DOJ accepted the case.
Affected (this filing): 15,000
HHS notified