OREGONHHS OCRFirst filing
Filed Dec 11, 2015bd_ff33148f9b841cd2
Northwest Primary Care Group (OR) reported to HHS on 2015-12-11 a Theft/insider-misuse incident affecting 5,327 individuals. On October 13, 2015, a former employee impermissibly accessed, downloaded, and printed a 52-page document from a desktop computer containing PHI of 5,327 patients, including names, SSNs, dates of birth, and credit card/bank account information. Breached information was located on a Desktop Computer and Paper/Films. No business associate was involved. The CE offered credit monitoring, implemented technical safeguards, revised HIPAA policies, and retrained staff. OCR confirmed satisfactory corrective actions.
Affected (this filing): 5,327
HHS notified