– Malware incidents
– Lost or stolen devices (laptop, USB, smartphone)
– Social media posts
– EHR breach
– Mishandling of medical records
– Misuse of PHI (discussing confidential information outside the office, sending it to the wrong patient, selling it to outside health care providers, etc.)
– Lack of employee training