California Department of State Hospitals

CA Department of State Hospitals (DSH) disclosed a breach at DSH-Atascadero involving an IT employee who improperly accessed patient and employee records. The incident, discovered on Feb 25, 2021, compromised PHI including names and COVID-19 test results for approximately 1,415 patients and 617 employees (total 2,032). The employee was placed on administrative leave. No SSN or financial data was involved. DSH notified HHS OCR, CA state agencies, and law enforcement.

Affected (this filing): 2,032

California Department of State Hospitals reported to HHS on 2021-03-17 a Unauthorized Access/Disclosure affecting 5014 individuals. Breached information located on Network Server. An employee impermissibly accessed ePHI including names, addresses, diagnoses, and lab results. The entity sanctioned the employee and strengthened policies.

Affected (this filing): 5,014

The CA Department of State Hospitals (DSH) disclosed that an employee improperly accessed personal and health information of approximately 2,952 employees, former employees, and job applicants. The data included names, addresses, phone numbers, email addresses, social security numbers, dates of birth, and health-related test results. The incident was discovered on March 15, 2021, during an investigation into the employee, who had previously been found to have improperly accessed patient and employee data in February 2021. The employee was placed on administrative leave, and the investigation is ongoing. No evidence of misuse of the compromised information has been found.

Affected (this filing): 2,952

The California Department of State Hospitals (DSH) discovered on April 13, 2021, that an employee improperly accessed personal and health information of approximately 299 individuals, including employees, former employees, and job applicants. The compromised data included names, addresses, phone numbers, email addresses, Social Security numbers, dates of birth, driver's license numbers, immigration information, and health information related to employment. DSH placed the employee on administrative leave, is cooperating with law enforcement, and has notified relevant regulatory bodies including HHS OCR and the California Attorney General. The investigation is ongoing.

Affected (this filing): 299