Administration›System Admin›HIPAA Audit Logs

HIPAA Audit Logs

Complete audit trail of PHI access and system events — HIPAA §164.312(b) compliant

Events Today
1,847
+12% vs yesterday
PHI Accesses
423
by 31 unique users
Anomalies
3
Require review
Failed Logins
7
Last 24 hours
TimestampUserActionResourceDetailsIP AddressStatus
2026-04-02 09:42:18 James Park FAILED_LOGIN Authentication 3 failed MFA attempts 203.0.113.52 Anomaly
2026-04-02 09:14:02 Sarah Chen LOGIN Authentication TOTP MFA success 10.1.2.45 Success
2026-04-02 09:15:44 Sarah Chen VIEW_PHI Patient #PT-10042 Accessed care plan + vitals 10.1.2.45 Authorized
2026-04-02 09:18:11 Sarah Chen UPDATE Care Plan #CP-2891 Modified medication section 10.1.2.45 Success
2026-04-02 08:02:09 James Park LOGIN Authentication TOTP MFA success 10.1.1.12 Success
2026-04-02 08:45:33 Maria Torres EXPORT PHI Report — 847 records Claims export to CSV 10.1.3.88 Authorized
2026-04-02 07:33:01 Unknown FAILED_LOGIN Authentication Invalid credentials × 5 (brute-force pattern) 198.51.100.9 Blocked
2026-04-02 07:12:00 System BACKUP Database Scheduled backup completed 127.0.0.1 Success
2026-04-01 16:55:20 Maria Torres LOGIN Authentication SMS MFA success 10.1.3.88 Success
2026-04-01 16:20:14 Linda Kim VIEW_PHI Patient #PT-10887 Viewed enrollment status 10.1.4.22 Authorized
2026-04-01 15:44:07 James Park CREATE User Account Invited nancy.rivera@eklotho.com 10.1.1.12 Success
2026-04-01 14:10:55 Dr. Robert Lee VIEW_PHI Patient #PT-10201 Reviewed prior auth request 10.1.5.66 Authorized
2026-04-01 13:02:40 System EDI_SEND CMS 837P Batch Transmitted 142 claims 10.1.0.1 Success
2026-04-01 11:30:18 James Park UPDATE Fee Schedule Updated CMS Medicare 2026 rates 10.1.1.12 Success
2026-04-01 10:15:02 Angela Patel VIEW_PHI Patient #PT-10553 Care plan review session (22 min) 10.1.6.44 Authorized
2026-04-01 09:55:30 Maria Torres DELETE Draft Claim #CLM-DFT-0042 Deleted incomplete draft claim 10.1.3.88 Authorized
2026-04-01 08:20:10 Tom Wilson EXPORT Patient List — 2,341 records Bulk PHI export — unusual volume 10.1.7.99 Review
2026-04-01 07:00:00 System BACKUP Database Scheduled full backup (218 GB) 127.0.0.1 Success
2026-03-31 17:40:12 Linda Kim LOGOUT Authentication Session ended (idle timeout) 10.1.4.22 Normal
2026-03-31 16:30:00 System EDI_RECV BCBS 835 ERA Received 88 remittances ($142,441) 10.1.0.1 Success
AI Assistant

HIPAA Audit Logs capture all system events including PHI access, user authentication, data exports, and administrative changes. Logs are immutable and retained for 7 years per HIPAA requirements.

  • Rows highlighted in red indicate anomalous activity
  • Triggers: brute-force attempts, unusual export volumes, off-hours access
  • Anomalies must be reviewed and documented per HIPAA §164.308(a)(1)

The PHI Access Report generates an audit summary required for HIPAA compliance reviews and OCR investigations. The report groups all PHI access events by user and patient.

Export in CSV or JSON format. Logs cannot be edited or deleted through the UI. Retention policy is set in System Configuration (default: 7 years). Archives older than 7 years are compressed and stored in cold storage.

Audit Log Entry
Event Details
User
Action
Resource
Details
Connection
IP Address
Status
Session ID
ses_a4f82c91