UMass Memorial Medical Group, Inc.

UMass Memorial Medical Group, Inc. (MA) reported to HHS OCR on 2015-01-30 an Unauthorized Access/Disclosure affecting 14,100 individuals. An employee impermissibly accessed patient PHI (paper/films) for approximately four months in 2014, using her legitimate job access for an unauthorized purpose. Breach notification was delayed at law enforcement's request. The employee was sanctioned and resigned. OCR's investigation led to new technical and physical safeguards, staff training, a third-party privacy review, and free credit monitoring for affected individuals.

Affected (this filing): 14,100