Health Data Breach Tracker/OH

Healthcare Provider · Archived

Ashtabula County Medical Center

3,683 individuals · submitted May 8, 2020

About this report

The covered entity (CE), Ashtabula County Medical Center, reported that an employee posted the protected health information (PHI) of 3,683 individuals to a public website. The PHI involved included names, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Complimentary credit monitoring services were also provided. In response to the breach, the CE sanctioned the responsible employee and revised its policies and procedures. OCR provided technical assistance to the CE regarding the HIPAA Privacy Rule.

Summary as published by the HHS Office for Civil Rights.

Organization
Ashtabula County Medical Center
State
OH
Entity type
Healthcare Provider
Individuals affected
3,683
Submission date
May 8, 2020
Breach type
Unauthorized Access/Disclosure
Location of information
Network Server
Business associate present
No
OCR status
Archived

More breach reports in OH

More Unauthorized Access/Disclosure reports