Kaiser Foundation Hospitals, Northern California

The covered entity (CE), Kaiser Foundation Hospitals, Northern California, reported that an employee impermissibly accessed the medical records and electronic protected health information (ePHI) of 2,121 individuals. The ePHI involved included names, dates of birth, phone numbers, email addresses, and photographs. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE also provided complimentary credit monitoring services. In response to the breach, the CE sanctioned the employee responsible for the breach. OCR provided technical assistance to the CE.