Orange County Global Medical Center

Orange County Global Medical Center reported to HHS on 2017-03-02 a Unauthorized Access/Disclosure affecting 677 individuals. Breached information located on Email. A workforce member inadvertently sent medical statistical reports containing PHI (treatment, diagnostic info, MRNs, DOBs) to an unauthorized recipient. The CE requested deletion, notified HHS/individuals/media, and is completing an enterprise-wide security risk analysis.

Affected (this filing): 677

Orange County Global Medical Center disclosed that an employee inadvertently emailed a statistical report containing patient treatment, diagnosis, medical record numbers, dates of birth, and names. The error was discovered on February 8, 2017, and the recipient was instructed to delete the information. The organization implemented additional protocols, reviewed policies, and provided staff training. Affected individuals were offered 12 months of identity monitoring.