Over 20 security guards at Yakima Valley Memorial Hospital accessed the medical records of 419 patients without authorization in 2018. The guards viewed sensitive information, including names, dates of birth, medical record numbers, addresses, notes related to treatment, and insurance details, all through the hospital's EHR system.
As a result, Yakima Valley Memorial Hospital has been fined $240,000 and is required to update its policies and train employees to prevent future incidents. These actions were taken after a press release issued by the HHS on June 15.
The breach highlights the importance of secure access controls for personal health information and the consequences that can result when those controls are not properly enforced.