OHHHS OCRFirst filing
Filed May 8, 2020bd_d2fc0f38b34af357
Ashtabula County Medical Center (OH) reported to HHS on 2020-05-08 an Unauthorized Access/Disclosure affecting 3,683 individuals. An employee posted PHI — including names, diagnoses/conditions, and other treatment information — to a public website. The CE notified HHS, affected individuals, and the media, posted substitute notice, offered credit monitoring, sanctioned the employee, and revised its policies. OCR provided technical assistance on the HIPAA Privacy Rule. Breached information was located on a Network Server.
Affected (this filing): 3,683
HHS notified