Health Data Breach Tracker/PA

Healthcare Provider · Archived

UPMC

1,279 individuals · submitted November 27, 2013

About this report

An employee impermissibly accessed the protected health information (PHI) of 1,279 individuals. The types of PHI accessed included names, dates of birth, social security numbers, and addresses, as well as clinical information. The covered entity (CE), UPMC, provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE sanctioned the employee and notified law enforcement. OCR reviewed the CE's risk analysis to ensure compliance with the Security Rule.

Summary as published by the HHS Office for Civil Rights.

Organization
UPMC
State
PA
Entity type
Healthcare Provider
Individuals affected
1,279
Submission date
November 27, 2013
Breach type
Unauthorized Access/Disclosure
Location of information
Electronic Medical Record
Business associate present
No
OCR status
Archived

More breach reports in PA

More Unauthorized Access/Disclosure reports