FEDERALHHS OCRFirst filing
Filed Sep 24, 2013bd_441ab6a6626b7752
An employee of Holy Cross Hospital, Inc. accessed and used protected health information (PHI) outside of their job duties to file fraudulent tax returns. The breach, reported to HHS on September 24, 2013, affected 9,900 individuals and compromised names, addresses, and Social Security numbers. The information was located on a desktop computer and network server. In response, the hospital terminated the employee, retrained staff, and enhanced its risk management procedures.
Affected (this filing): 9,900
HHS notified