Upmc

UPMC (PA) reported to HHS OCR on 2015-05-15 a Theft/insider-disclosure breach affecting 2,259 individuals. A business associate employee disclosed patients' PHI — including names, dates of birth, and Social Security numbers — to outside parties. The covered entity terminated its relationship with the business associate following the incident. OCR reviewed UPMC's risk analysis for Security Rule compliance. Breached information location: Other.

Affected (this filing): 2,259