Health Fitness Corporation
ent_2eea5290bd9c6a58a888e027
Disclosures
3
HHS OCR · 1 jurisdiction
Incidents
1
filings grouped by incident
Max affected reported
4,837
as filed · HHS OCR IL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Health Fitness Corporation
- Normalized
- health fitness— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- ILHHS OCRas victim2018-10-15
Health Fitness Corporation reported to HHS on 2018-10-15 a Unauthorized Access/Disclosure affecting 550 individuals. Breached information located on Other. The incident involved a software misconfiguration on a server housing ePHI, making it discoverable on the internet starting in August 2015. Health Fitness, a Business Associate, filed reports on behalf of multiple covered entities.
- ILHHS OCRas victim2013-11-14
Health Fitness Corporation, a Business Associate in Illinois, reported the theft of a laptop containing the personal information of 4,837 individuals. The breach was submitted to HHS on November 14, 2013.
- ILHHS OCRas victim2013-11-14
Health Fitness Corporation (a Business Associate, IL) reported to HHS on 2013-11-14 a Theft affecting 3,804 individuals. An unencrypted company laptop was stolen from a BA employee's car. The laptop contained PHI including employee and/or spouse names, birthdates, health plan elections, and Social Security numbers. The CE notified HHS; the BA notified affected individuals and media. Corrective actions included mandatory laptop encryption policies, employee training, and a BA certification process for encrypted mobile devices. OCR obtained assurances that all corrective actions were taken. Breached information located on Laptop.