Puerto Rico Department of Health - Medicaid Program reported to HHS on 2015-04-22 a Theft affecting 500 individuals (4,192 per web description). On 2015-02-26, a Medicaid staff member was arrested for using a personal cell phone to photograph screens of the MEDITI system, selling ePHI of beneficiaries including names, DOBs, SSNs, addresses, phone numbers, gender, and income. The CE conducted risk analyses, updated HIPAA policies, retrained staff, notified affected individuals and media, and provided one year of credit monitoring. OCR obtained corrective action assurances.
Affected (this filing): 500