Home for Little Wanderers

On May 4, 2018, someone used the key card of a former employee to access the records room, potentially affecting 861 individuals. The type of protected health information (PHI) that was potentially exposed included demographic and clinical information. The covered entity (CE), Home for Little Wanderers, provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE deactivated the key card, closed and processed records to send to its secure record storage vendor, and updated its employee termination policy. The CE also began assessing potential improvements to improve internal security and limit employee access to records rooms. OCR obtained assurances that the CE implemented the corrective actions noted above.