Florida Digestive Health Specialists (FL) reported to HHS on 2013-12-09 an Unauthorized Access/Disclosure affecting 4,400 individuals. A patient scheduler impermissibly accessed the EHR system via VPN, photographed patient records (names, addresses, DOBs, SSNs, phone numbers), and attempted to print them at Wal-Mart. The County Sheriff investigated; the insider was terminated. CE updated policies, restricted VPN access, instituted weekly EHR audits, and retrained staff. OCR provided technical assistance on breach notification requirements. Breached information located on Desktop Computer.
Affected (this filing): 4,400