Allegheny County, PA, the covered entity (CE), reported that an employee inadvertently uploaded a document containing the electronic protected health information (ePHI) of approximately 3,394 individuals. The ePHI involved included Social Security numbers and medications prescribed. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented new administrative, technical, and security safeguards and retrained its staff on the proper methods of safeguarding ePHI.
