University Medical Breaches Affecting 500 or More Persons

According to School Safety Partners, ten university or education-related breaches of unsecured protected health information have been reported to the U.S. Secretary of Health & Human Services.

WASHINGTON, DC (School Safety Partners) August 2, 2010 -- As required by section 13402(e)(4) of the HITECH Act, the Secretary of Health & Human Services must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches related to universities or educators have been reported to the Secretary.

University Health System
State: Nevada
Approx. # of Individuals Affected: 7,526
Date of Breach: 6/11/10
Type of Breach: Theft
Location of Breached Information: Network Server
 
Loma Linda University Health Care
State: California
Approx. # of Individuals Affected: 584
Date of Breach: 4/04/10
Type of Breach: Theft
Location of Breached Information: Desktop Computer
 
Georgetown University Hospital
State: District of Columbia
Approx. # of Individuals Affected: 2,416
Date of Breach: 3/26/10
Type of Breach: Theft, Other
Location of Breached Information: E-mail, Portable Electronic Device
 
University of Pittsburgh Student Health Center
State: Pennsylvania
Approx. # of Individuals Affected: 8,000
Date of Breach: 3/11/10
Type of Breach: Theft, Loss
Location of Breached Information: Paper Records
 
University of New Mexico Health Sciences Center
State: New Mexico
Approx. # of Individuals Affected: 1,900
Date of Breach: 2/08/10
Type of Breach: Other
Location of Breached Information: Desktop Computer
 
Educators Mutual Insurance Association of Utah
State: Utah
Business Associate Involved: Health Behavior Innovations
Approx. # of Individuals Affected: 5,700
Date of Breach: 12/27/09
Type of Breach: Theft
Location of Breached Information: CDs
 
Brown University
State: Rhode Island
Business Associate Involved: Blue Cross Blue Shield of Rhode Island
Approx. # of Individuals Affected: 528
Date of Breach: 12/11/09
Type of Breach: Unauthorized Access
Location of Breached Information: Paper Records
 
University of California, San Francisco
State: California
Approx. # of Individuals Affected: 7,300
Date of Breach: 11/30/09
Type of Breach: Theft
Location of Breached Information: Laptop
 
University Medical Center of Southern Nevada
State: Nevada
Approx. # of Individuals Affected: 5,103
Date of Breach: 10/31/09
Type of Breach: Theft, Unauthorized Access
Location of Breached Information: Paper Records
 
University of California, San Francisco
State: California
Approx. # of Individuals Affected: 610
Date of Breach: 9/22/09
Type of Breach: Phishing Scam
Location of Breached Information: Email

Source: Health Information Privacy - HIPAA Administrative Simplification Statute and Rules - Breach Notification Rule