Orlando Health (FL) reported to HHS OCR on 2015-07-02 an Unauthorized Access/Disclosure affecting 3,421 individuals. Discovered during an audit on May 27, 2015, an employee was found to be accessing patient PHI — including names, dates of birth, and clinical records — outside the scope of her employment via Electronic Medical Record systems. The employee was terminated. Corrective actions included workforce retraining and credit monitoring for affected individuals. OCR obtained assurances of corrective action.
Affected (this filing): 3,421