HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 29, 2018.
- Organization as reported
- Arkansas Children's Hospital, AR
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- June 29, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13769, row:4908)
- Archived copy
- Held in the private archive (provenance)
Law enforcement notified the covered entity (CE) that a former workforce member fraudulently used patients’ Social Security numbers and other demographic information. The workforce member had access to 4,521 patients’ protected health information (PHI) to perform the essential functions of the job. Following the breach, the CE began revising its policy to incorporate a renewed background check of its workforce every three years. In addition, the CE implemented an access monitoring process which audits access to its patients' records and reports questionable recent activity and the date of activity, and provides a platform for documenting breach incident assessments and investigations. The CE provided breach notification to HHS, affected individuals, and the media and offered one year of free credit monitoring. OCR obtained assurances the CE implemented the corrective actions listed above.