Camas Center Clinic, Kalispel Tribe of Indians (WA) reported to HHS on 2016-11-21 an Unauthorized Access/Disclosure affecting 504 individuals. An employee shared their personal login credentials with an on-call temporary administrative assistant who had not yet received HIPAA training. The assistant used those credentials to access ePHI on a desktop computer and also accessed paper PHI. PHI involved included demographic, financial, and clinical information. IT disabled the login upon discovery; the employee was sanctioned and workforce was retrained on HIPAA. OCR obtained assurances of corrective action.
Affected (this filing): 504