Florida Department of Health reported to HHS on 2013-12-23 an Unauthorized Access/Disclosure affecting 2,354 individuals. OCDOH employees with authorized access to the CE's Health Maintenance System (HMS) photographed computer screens containing PHI with smartphones and provided the data to a third party for fraudulent tax return filing. PHI exposed included patient names, dates of birth, and Social Security numbers. Breached information located on Desktop Computer. The CE sanctioned the employees, masked SSNs system-wide, updated access policies, and completed staff training. OCR obtained assurances of corrective action.
Affected (this filing): 2,354