NEW YORKHHS OCRFirst filing
Filed Jul 7, 2010bd_24bbe671fbc9b6cd
NYU Hospitals Center (NY) reported to HHS OCR on 2010-07-07 that an unencrypted USB drive containing ePHI of 2,563 individuals was misplaced (reported internally as a possible theft). The ePHI included names, medical record numbers, ages, genders, procedures, physician names, anesthesia types, and recovery room timestamps. Following OCR's investigation, the CE halted unencrypted USB use, installed DLP software, updated physical security, purchased encrypted USB drives, revised its mobile device policy, and retrained all workforce members. Breached information located on Other Portable Electronic Device.
Affected (this filing): 2,563
HHS notified