Tomah Memorial Hospital (Tomah, WI) reported to HHS on 2010-04-16 a breach affecting approximately 600 patients. A nurse impermissibly used patient PHI — names and account numbers — to obtain narcotics from the hospital for personal use. Breached information located on other media. The hospital notified HHS, affected individuals, and the media; terminated the employee; and implemented monthly Schedule II narcotic audits. OCR obtained assurances of corrective action.
Affected (this filing): 600