WASHINGTONHHS OCRFirst filing
Filed Jan 3, 2014bd_758e7f2d9f7e4c8b
Coulee Medical Center (WA) reported to HHS on 2014-01-03 a breach affecting 2,500 individuals. A CE-employed physician disclosed ePHI to his wife without authorization via email, laptop, and network server. Exposed data included names, hospital account numbers, dates of service, CPT codes, and service descriptions. The physician was sanctioned and required to complete HIPAA training; the CE implemented new information security policies. OCR provided technical assistance on risk analysis and breach notification requirements.
Affected (this filing): 2,500
HHS notified