ARHHS OCRFirst filing
Filed May 7, 2018bd_ffef90e880d7aec9
Baptist Health (AR) reported to HHS OCR on 2018-05-07 an Unauthorized Access/Disclosure affecting 3,453 individuals. A physician stored patient PHI — including names, dates of birth, and treatment information — on a cloud-based file-sharing application without a Business Associate contract. Breached information was located on a Network Server/cloud storage. CE notified HHS, affected individuals, and media; subsequently improved safeguards, updated policies, and trained EHR users. OCR obtained corrective-action assurances.
Affected (this filing): 3,453
HHS notified