Children's Mercy Hospital

About this report

CMH physician store protected health information on a personal website. Approximately 5,511 individuals were affected by this breach. The breach included names, dates of birth, diagnoses and conditions, and ICD codes. In order to prevent a similar breach from happening in the future, CMH reviewed and updated policies, created a new online course, retrained employees, physician received monetary sanctions, and conducted additional counseling. CMH sent out breach notices to affected individuals, sent a media notice to the Kansas City Star. And provided notice via CMH’s website. CMH provided documentation of the actions it took in this matter.

Summary as published by the HHS Office for Civil Rights.