Summit Medical Group (NJ) reported to HHS OCR on 2018-11-02 a Loss affecting 525 individuals. A staff member misplaced and could not recover a handwritten notebook containing PHI for ~525 patients. The PHI included names, dates of birth, addresses, SSNs, telephone numbers, medical record numbers, health plan information, clinical information, and dates of services. The notebook was maintained outside the EHR system. Post-breach, the CE retrained staff, prohibited unofficial PHI records, and sanctioned the staff member. OCR obtained assurances of corrective actions.
Affected (this filing): 525