Carson Valley Medical Center (Gardnerville, NV) reported to HHS on April 4, 2017 an unauthorized access/disclosure breach affecting 11,368 individuals. A spreadsheet containing PHI was potentially compromised by an unauthorized user via an email scam. Exposed data included names, discharge dates, billing account numbers, and locations of services. The CE notified HHS, affected individuals, and media, then implemented technical safeguards, updated its security risk analysis, and trained staff. OCR provided HIPAA Security Rule technical assistance.
Affected (this filing): 11,368