MNHHS OCRFirst filing
Filed Dec 23, 2015bd_241d659c3da3c67e
Allina Health (MN) reported to HHS on 2015-12-23 an Improper Disposal breach affecting 6,195 individuals. On October 27, 2015, a janitorial vendor erroneously placed patients' PHI in a trash dumpster; breached information was on Paper/Films and included financial, demographic, and clinical data. The CE updated its physical safeguards policy, educated staff, and worked with Iron Mountain (its PHI disposal BA) on corrective actions. OCR confirmed implementation of remediation measures.
Affected (this filing): 6,195
HHS notified