Health Data Breach Tracker/CA

Healthcare Provider · Archived

Mercy Medical Center Redding - Oncology Clinic, Privacy Manager Breach

616 individuals · submitted December 22, 2014

About this report

On December 13, 2014, the covered entity (CE), Mercy Medical Center’s Redding Oncology Clinic, reported that electronic protected health information (ePHI) was accessible on the Internet when its business associate (BA), Write-Type, Inc., left the ePHI on its website. The website contained the ePHI of approximately 616 individuals and included names, addresses, medical record numbers, physicians’ names, and clinical information such as diagnoses, medications, lab reports, and other treatment information. The CE provided breach notification to HHS, affected individuals and the media. The CE revised its policies and procedures. OCR obtained assurances that the CE implemented the corrective actions noted above.

Summary as published by the HHS Office for Civil Rights.

Organization
Mercy Medical Center Redding - Oncology Clinic, Privacy Manager Breach
State
CA
Entity type
Healthcare Provider
Individuals affected
616
Submission date
December 22, 2014
Breach type
Hacking/IT Incident
Location of information
Other
Business associate present
No
OCR status
Archived

More breach reports in CA

More Hacking/IT Incident reports