MIHHS OCRFirst filing
Filed Jan 9, 2015bd_1bf520d3d395b009
Henry Ford Health System (MI) reported to HHS OCR on 2015-01-09 a Loss breach affecting 2,336 individuals. On October 23, 2014, a physician lost a personal (non-employer-issued) USB flash drive containing PHI — clinical and demographic information — in violation of CE policy requiring employer-issued encrypted flash drives. The CE sanctioned the employee, notified affected individuals and media, and provided OCR with written assurances of corrective actions including an enhanced asset management program and enterprise data mapping. Breached information was located on a portable electronic device.
Affected (this filing): 2,336
HHS notified