Kaiser Foundation Hospitals, Northern California and The Permanente Medical Group, Inc.

Kaiser Permanente Northern California reported that a workforce member inappropriately accessed patient medical records without a reasonable basis. The incident was discovered on May 16, 2024. Affected data included demographic information (name, address, email, phone, DOB, medical record number) and medical information. Social Security numbers and financial information were not involved. Access was removed and an investigation was launched.

Kaiser Foundation Hospitals, Northern California and The Permanente Medical Group, Inc. reported to HHS on 2024-07-15 an Unauthorized Access/Disclosure affecting 3,435 individuals. An employee impermissibly accessed medical records. PHI involved included names, dates of birth, addresses, email addresses, phone numbers, clinical information, and other treatment information. Breached information was located in Electronic Medical Records. The CE revised its policies and procedures and sanctioned the workforce member involved.

Affected (this filing):