ProMedica Bixby Hospital

The covered entity (CE), ProMedica Bixby Hospital, reported that multiple employees impermissibly accessed the protected health information (PHI) of 3,472 individuals without a business or clinical reason. The PHI involved included names, addresses, dates of birth, health insurance information, diagnoses, lab results, medications, and other treatment information. In response to the breach, the CE notified HHS, the affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE offered complimentary credit monitoring services, established a call center for questions or concerns, sanctioned the employees involved, and retrained its workforce.