Geisinger Wyoming Valley Medical Center (PA) reported to HHS OCR on 2010-12-28 a Theft/insider misuse incident affecting 2,928 individuals. A staff physician emailed PHI—including names, addresses, dates of birth, SSNs, and medication information—to his personal home email account while working on an analysis. The CE sanctioned the physician, implemented auto-encryption for PHI emailed externally, improved physical safeguards, and retrained staff following OCR investigation. Breached information was located on Email.
Affected (this filing): 2,928