Although not required by HIPAA to notify affected patients, Titus sent 108 former patients letters alerting them to the identity risk. There is no evidence of data disclosure to third parties. The nurse claims to have viewed the records out of curiosity, according to the report.
Related Articles on HIPAA Violations:
Hacked Server at OSU Medical Center Contained Info on More Than 180 People