ILHHS OCRFirst filing
Filed Mar 23, 2012bd_8670c6df5a30ead3
Chicago Musculoskeletal Institute reported to HHS on 2012-03-23 an Unauthorized Access/Disclosure affecting 750 individuals. On December 31, 2011, patient names, dates of birth, medical record numbers, and clinic notes were inadvertently exposed on the CE's network server and website. The CE disabled the website, removed the data, and notified HHS, affected individuals, and the media. Following OCR investigation, the CE provided fraud and credit monitoring to patients and retrained staff on technical safeguards. Breached information located on Network Server.
Affected (this filing): 750
HHS notified