Aurora-based University of Colorado Health began notifying more than 800 patients Thursday that an employee inappropriately gained access to their health records out of "personal curiosity," according to a news release.
UCHealth realized it suffered a breach while performing a regular audit to ensure employee compliance with HIPAA.
"The employee was able to see patients' names, addresses, phone numbers, dates of birth, insurance information and a description of the care and treatment received during a visit," a news release reads. "However, the employee was not able to access Social Security numbers or other personal, financial information. There is no evidence at this time that the staff member shared this information with anyone else."
The employee has since been fired and the system has initiated re-training for all of its staff, emphasizing the only records they can review are for patients to whom they are directly providing care.