FEDERALHHS OCRFirst filing
Filed Jun 8, 2012bd_51a2a2565b251c04
A staff member at Memorial Sloan-Kettering Cancer Center disclosed an unencrypted file containing the protected health information of 568 individuals to a non-covered entity physician, who subsequently re-disclosed it to a medical education organization for a presentation. The presentation was then posted on the organization's website. The exposed data included names, Social Security numbers, medical record numbers, and clinical information. In response, the center had the data removed, sanctioned the employee, and retrained its workforce. OCR's investigation confirmed the center implemented corrective actions.
Affected (this filing): 568
HHS notified