West Virginia University Board of Governors reported to HHS on 2023-03-03 an Unauthorized Access/Disclosure affecting 2,453 individuals. Due to an employee error, PHI (names, diagnoses, and other treatment information) was posted on a public-facing website hosted on a network server. The CE notified HHS, affected individuals, the media, and provided substitute notice. Remediation included sanctioning the responsible workforce member, retraining staff, and implementing additional technical safeguards and updated policies and procedures.
Affected (this filing): 2,453