UT Southwestern Medical Center (TX) reported to HHS on 2024-03-27 an Unauthorized Access/Disclosure affecting 2,045 individuals. Breached information was located on a Network Server. Workforce members impermissibly disclosed PHI — including names, addresses, dates of birth, financial information, diagnoses, conditions, and other treatment information — without appropriate contractual agreements in place. The CE sanctioned the involved workforce members, implemented additional technical safeguards, and provided additional HIPAA training.
Affected (this filing): 2,045