Bay Park Hospital (OH) reported to HHS on 2014-05-28 an Unauthorized Access/Disclosure affecting 594 individuals. A hospital employee accessed ePHI — including names, dates of birth, diagnoses, and other clinical information — without a valid business reason. The employee was questioned, immediately resigned, and the workforce was retrained on HIPAA policies. Breached information was located on Electronic Medical Record and Network Server systems. OCR obtained assurances that all corrective actions were completed.
Affected (this filing): 594