St. Louis Children's Hospital (MO) reported to HHS OCR on 2017-03-09 that employees emailed PHI in an unsecure manner, affecting 643 individuals. Breached information was located in Email. PHI exposed included names, addresses, telephone numbers, dates of birth, Medicaid numbers, medications prescribed, and clinical information. The CE notified HHS, affected individuals, and the media, established a call center, implemented additional administrative and technical safeguards, and retrained staff on HIPAA Rules and secure email practices. OCR obtained assurances that corrective actions were implemented.
Affected (this filing): 643