NEW YORKHHS OCRFirst filing
Filed Oct 21, 2013bd_71746bf1d0010545
Mount Sinai Medical Center (NY) reported to HHS OCR on 2013-10-21 the loss of a provider's personal unencrypted USB drive containing PHI for 610 individuals. The drive included names, dates of birth, medical record numbers, procedure logs, procedure dates, procedure information, and clinical information. The CE sanctioned the provider, retrained staff on HIPAA, and was directed by OCR to conduct a risk analysis, update portable-device policies, and implement encryption requirements for personally owned devices.
Affected (this filing): 610
HHS notified