DeKalb Medical Center, Inc. d/b/a DeKalb Medical Hillandale reported to HHS on 2011-07-15 a Theft affecting 7,500 individuals; breached information was located on Paper/Films. An insider employee took PHI off premises over approximately three months for identity theft purposes, impermissibly accessing names, dates of birth, medical record/account numbers, admission/visit dates, diagnoses, treating physicians, and in some cases SSNs. The employee was terminated; the CE implemented a corrective action plan and retraining. OCR confirmed appropriate notifications and corrective steps.
Affected (this filing): 7,500