Professional Dermatology Care

The covered entity’s (CE) staff discovered that its electronic medical records system was compromised when they could no longer access patient records. The incident affected approximately 13,237 individuals and involved demographic and financial information. The CE provided breach notification to HHS, affected individuals, and the media. Following the incident, the CE conducted an internal investigation and improved its safeguards and encryption methods. OCR obtained assurances that the CE improved its HIPAA policies and procedures and retrained its employees.