Cheyenne Regional Medical Center reported to HHS on 2022-07-05 an Unauthorized Access/Disclosure affecting 1,652 individuals. An employee impermissibly accessed PHI stored in Electronic Medical Records, including names, addresses, dates of birth, SSNs, diagnoses, lab results, medications, and other treatment information. The CE sanctioned the employee, notified affected individuals and media, and implemented additional safeguards. OCR provided technical assistance on HIPAA Security Rule obligations.
Affected (this filing): 1,652