MSHHS OCRFirst filing
Filed Mar 21, 2013bd_46d455e619a68029
University of Mississippi Medical Center (UMMC) reported to HHS OCR on 2013-03-21 a loss/theft incident affecting 500 individuals per the HHS portal (investigation revealed ~10,000 patients impacted). A password-protected laptop went missing from the MICU, likely stolen by a visitor. OCR also found a UMMC network drive broadly accessible via generic credentials over wireless, exposing ePHI of ~10,000 patients since 2008. UMMC paid a $2,750,000 settlement and adopted a corrective action plan. Breached information located on a Laptop.
Affected (this filing): 500
HHS notified