Vail Clinic, Inc. dba Vail Valley Medical Center and dba Howard Head Sports Medicine (CO) reported to HHS on 2016-04-15 an Unauthorized Access/Disclosure affecting 3,118 individuals. A workforce member impermissibly acquired and retained ePHI — including names and diagnoses/conditions — stored on a network server. The CE sanctioned the responsible employee, retrained staff, and strengthened administrative, physical, and technical safeguards. OCR provided technical assistance.
Affected (this filing): 3,118