ILHHS OCRFirst filing
Filed Apr 9, 2018bd_1379febb0fb4b575
On December 2, 2016, a healthcare researcher notified Integrated Rehab Consultants (IL) that its patient data had been inadvertently uploaded to a public GitHub repository by Magnum, a sub-vendor of TrueRCM. The exposure affected 4,292 individuals, involving demographic and clinical (PHI) information. The breach was discovered to have been accessed by at least one additional party in fall 2017. Data was removed from GitHub, TrueRCM terminated Magnum, and HIPAA policies were updated. OCR obtained documented assurances of corrective action. Submitted to HHS on 2018-04-09.
Affected (this filing): 4,292
HHS notified