PAHHS OCRFirst filing
Filed Jun 6, 2014bd_d022887c458350db
Penn State Milton S. Hershey Medical Center (PA) reported to HHS OCR on 2014-06-06 an Unauthorized Access/Disclosure affecting 1,801 individuals. An employee downloaded PHI onto an unsecured flash drive, used it on a personal computer, and emailed the work via a personal email account. Breached information was located on Email and Other Portable Electronic Device. PHI included demographic and clinical information. OCR investigated; CE updated encryption measures, reinforced staff policies, and obtained assurances of corrective action.
Affected (this filing): 1,801
HHS notified