Yale New Haven Health System (CT, healthcare provider) reported to HHS OCR a hacking/IT incident affecting a network server that compromised PHI of 5,556,702 individuals. Data elements included names, dates of birth, addresses, and Social Security numbers. The entity notified HHS, affected individuals, the media, and provided substitute notice, and implemented additional administrative, technical, and security safeguards. The OCR Wall of Shame entry indicates no business associate was involved.
Affected (this filing): 5,556,702