Health Data Breach Tracker/KY

Healthcare Provider · Archived

University of Louisville Research Foundation, Inc., DBA The Kidney Disease Program

708 individuals · submitted June 1, 2010

About this report

An outside computer’s unique numerical code (Internet Protocol address) accessed the covered entity’s (CE) website which contained a database containing the protected health information of 708 patients. The types of PHI involved in the breach included names, social security numbers, and treatment information. The CE provided breach notification to HHS and affected individuals. Following the breach, the CE disabled the website containing the breached PHI. As a result of OCR’s investigation, the CE removed social security numbers from its site, added a time out feature, retrained staff, and completed a risk assessment.

Summary as published by the HHS Office for Civil Rights.

Organization
University of Louisville Research Foundation, Inc., DBA The Kidney Disease Program
State
KY
Entity type
Healthcare Provider
Individuals affected
708
Submission date
June 1, 2010
Breach type
Hacking/IT Incident
Location of information
Network Server
Business associate present
No
OCR status
Archived

More breach reports in KY

More Hacking/IT Incident reports