HealthPartners Inc (MN, Health Plan) reported to HHS on 2014-03-21 an Unauthorized Access/Disclosure affecting 27,839 individuals. On January 21, 2014, an employee's husband accessed devices containing PHI while assisting her with telework tasks — formatting data and creating spreadsheet reports — thereby impermissibly receiving demographic and clinical information of 37,606 individuals (broader internal count). Breached information was located on Desktop Computer, Laptop, and Other Portable Electronic Device. HealthPartners implemented corrective measures including updated policies, employee training, encryption, removable-media controls, and network access restrictions. OCR obtained documented assurances of compliance.
Affected (this filing): 27,839