Aventura Hospital and Medical Center (FL) reported to HHS on 2014-09-11 a Theft/Unauthorized Access breach affecting 82,601 individuals. On or around May 28, 2014, an employee of Valesco Ventures — a contractor providing staffing and ancillary services — inappropriately accessed the PHI of approximately 82,601 patients, including demographic information, via the hospital's network server. The CE notified HHS, affected individuals, and the media, offered credit monitoring and identity theft protection, retrained staff, updated audit controls, tightened system access approvals, revised BA contracts, and completed a new risk analysis and risk management plan. OCR obtained assurances that all corrective actions were implemented.
Affected (this filing): 82,601