Skip to content
Network USA

HHS OCR report ยท 2014

Penn State Milton S. Hershey Medical Center data breach

Penn State Milton S. Hershey Medical Center, a healthcare provider in Pennsylvania, reported a breach affecting 1,801 individuals to HHS OCR on Jun 6, 2014.

OCR report facts

Covered entity
Penn State Milton S. Hershey Medical Center
Entity type
Healthcare Provider
Individuals affected
1,801
Submission date
Jun 6, 2014
Type of breach
Unauthorized Access/Disclosure
Location of breached information
Email, Other Portable Electronic Device
Business associate present
No
Status
Archive (closed)

OCR description

An employee of the covered entity (CE), Penn State Milton S. Hershey Medical Center, downloaded protected health information (PHI) onto an unsecured flash drive and used the device in his personal computer to complete work which he then emailed to the CE using his personal email account. The types of PHI involved in the breach included the demographic and clinical information for 1,801 individuals. The CE provided breach notification to HHS, affected individuals, and the media. Following t...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Penn State Milton S. Hershey Medical Center data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Penn State Milton S. Hershey Medical Center legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Penn State Milton S. Hershey Medical Center.