Terrell County Health Department (GA) reported to HHS on 2013-02-18 an Unauthorized Access/Disclosure affecting 18,000 individuals. On December 6, 2012, the Dawson Police Department notified the CE that an employee was suspected of identity theft of patients. All patients whose records the employee had access to during employment were potentially affected. PHI involved included demographic, clinical, financial, and health insurance information. The CE terminated the employee, re-educated staff, and improved HIPAA training, risk analysis, software, and auditing. OCR obtained assurances of corrective action.
Affected (this filing): 18,000