Memorial Healthcare System reported to OCR that the PHI of 115,143 patients had been impermissibly accessed by its employees and impermissibly disclosed to affiliated physician office staff. This information consisted of the affected individuals’ names, dates of birth, and social security numbers.
Read the Resolution Agreement and Corrective Action Plan, as well as OCR's Press Release concerning the settlement here:
https://www.hhs.gov/about/news/2017/02/16/hipaa-settlement-shines-light-on-the-importance-of-audit-controls.html