Mary Rutan Hospital

The covered entity (CE), Mary Rutan Hospital, reported that an employee inadvertently posted the electronic protected health information (ePHI) of 1,676 individuals on its website. The ePHI involved included names, claims information, dates of birth, health insurance information, and treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE strengthened its administrative safeguards and retrained its employees.