Jesle Kuizon

Between October and November of 2011, employees of San Jose Medical Supply, Inc. (SJMS) impermissibly disclosed information regarding 800 SJMS patients. The information contained on Excel spreadsheets and prescriptions contained full names, addresses, zip codes, medical conditions, diagnoses, license numbers, physicians’ contact information, and dates prescriptions were obtained. SJMS initiated a forensics security investigation, identified the perpetrators of the breach, determined the recipients of the information, trained employees on HIPAA regulations and patient information security procedures, and filed a lawsuit against Front Medical Supply and the individual perpetrators. SJMS provided breach notification to the California Attorney General, the Secretary of HHS, the affected individuals, and the media. SJMS enhanced computer security protection and protocols to ensure that patient information is protected from unauthorized access, sanctioned responsible workforce members, and updated policies and procedures. OCR determined that SJMS is not a covered entity.