WISCONSINHHS OCRFirst filing
Filed Jan 29, 2018bd_c95ea113a75c5807
QuadMed, LLC (operating an occupational health clinic for Whirlpool) reported to HHS OCR on 2018-01-29 an Unauthorized Access/Disclosure affecting 4,549 individuals. Employees with access to the occupational health EMR system were able to view medical information beyond the minimum necessary for their job function. OCR subsequently determined QuadMed was not a HIPAA-covered entity and the data was not PHI; the case was closed with no enforcement action. Breached information located in Electronic Medical Records.
Affected (this filing): 4,549
HHS notified