Sierra View District Hospital (also referred to as Sierra View Medical Center) reported to HHS OCR on 2013-09-20 an Unauthorized Access/Disclosure affecting 1,009 individuals. A workforce member impermissibly accessed an internal hospital roster across departments over several days between July and August 2013. Exposed ePHI included patient names, room numbers, treating physician information, diagnoses, and treatment notes stored in Electronic Medical Records. The employee was sanctioned; the CE revised policies, implemented log-in monitoring, and conducted security training. OCR issued corrective action guidance.
Affected (this filing): 1,009