Yale New Haven Health Services, the covered entity (CE), reported that the electronic protected health information (ePHI) of 506 individuals, related to COVID-19 testing, was exported from one computer system to another, which intertwined patient information with employee information allowing unauthorized individuals access to this medical information. The ePHI involved included names, birth dates, medical record numbers, telephone numbers, clinical information, and treatment information. The CE notified HHS, affected individuals, and provided a complimentary phone number for questions or concerns. In its mitigation efforts, the CE retrained its staff in an effort to prevent incidents of this nature in the future.
