CHS has 206 affiliated hospitals, including 37 in Florida
Attorney General Ashley Moody along with 27 other attorneys general has received a judgment against Community Health Systems, Inc., based in Tennessee, and its subsidiary CHSPSC LLC.
ASHLEY MOODY: Relieves the 430,000+ Floridians affected by the negligence of this healthcare company
BREVARD COUNTY, FLORIDA – Attorney General Ashley Moody along with 27 other attorneys general have received a judgment against Community Health Systems, Inc., based in Tennessee, and its subsidiary CHSPSC LLC.
This ruling triggers an investigation into a data breach that affected approximately 6.1 million patients, including more than 430,000 from the state of Florida.
At the time of the data breach, CHS owned, rented or operated 206 affiliated hospitals, including 37 in Florida.
The information disclosed in the violation included addresses, dates of birth, names, phone numbers, and social security numbers of patients.
The verdict, as agreed by CHS, requires a payment of US $ 5 million to the states and provides for CHS to agree to implement and maintain a comprehensive information security program, appropriately designed to protect personal information and proprietary health information that is specific to Information security requirements included.
"Healthcare patients are routinely asked to provide personal information during treatment," said Moody.
“The added stress of a data breach leaking personal information can be overwhelming. I am glad we were able to provide relief to the more than 430,000 Floridians affected by the negligence of this healthcare company. "
Specific information security measures included in the agreed judgment include requirements for:
• • Develop a written incident response plan;
• • Incorporate security awareness and privacy training for all employees who have access to protected health information.
• • Limit unnecessary or inappropriate access to protected health information. and
• • Implement specific policies and procedures for business partners, including the use of business partner agreements and reviews of business partners.