NEW YORKHHS OCRFirst filing
Filed Nov 9, 2018bd_64fcb41aacefdc5b
SUNY Upstate Medical University reported to HHS on 2018-11-09 a Unauthorized Access/Disclosure affecting 1216 individuals. Breached information located on Electronic Medical Record. An employee impermissibly accessed medical records of 1,216 individuals, exposing PHI including names, addresses, birthdates, health insurance, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, and the media, and implemented corrective actions including policy updates and staff retraining.
Affected (this filing): 1,216
HHS notified