US River Falls Medical Clinic 2012 Physical Action (Q15886)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US River Falls Medical Clinic 2012 Physical Action |
A data breach risk event |
Statements
85A30797-10F5-483C-8BCD-0576F93D3A3F
January 2012
0 references
Perhaps the Office for Civil Rights (OCR) was so specific with subcontractor language and breach notification amendments in the HIPAA omnibus rule for good reason. Similar to many recent healthcare data breaches, River Falls Medical Clinic notified about 2,400 clients of a breach that was tied to a subcontractor, in this case an outside cleaning service employee who stole patient records during the summer of 2012. (English)
