Carolina Digestive Health Associates

The covered entity (CE), Carolina Digestive Health Associates, reported that an employee impermissibly accessed its electronic medical record system. This breach affected the electronic protected health information (ePHI) of 10,988 individuals. The ePHI involved included names, addresses, dates of birth, and Social Security numbers. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the responsible employee and implemented additional administrative, technical and security safeguards to better protect its ePHI. OCR provided the CE with technical assistance.