National Imaging Associates, Inc.

National Imaging Associates, Inc. (MD) reported to HHS OCR on 2022-05-02 an Unauthorized Access/Disclosure affecting 744 individuals. A business associate employee impermissibly shared PHI — including names, addresses, dates of birth, diagnoses, lab results, medications, and treatment information — with an unauthorized individual via laptop. The BA sanctioned the workforce member, implemented additional safeguards, and retrained all staff. The CE notified HHS, affected individuals, and the media.

National Imaging Associates, Inc. (NIA) disclosed a breach involving a Physician Clinical Reviewer (PCR) who unauthorizedly shared his screen via Zoom with a non-employee guest, granting them remote access to health plan member records. The incident occurred between November 1, 2021, and March 8, 2022. Affected data included health information (diagnosis, treatment, test results) and demographic data (name, address, DOB, member ID). NIA suspended the employee, terminated them, and offered 12 months of Experian IdentityWorks.

National Imaging Associates, Inc. reported to HHS on 2022-04-22 a Unauthorized Access/Disclosure affecting 616 individuals. Breached information located on Laptop. An employee of the business associate impermissibly shared PHI (names, addresses, DOB, diagnoses, lab results, medications) with an unauthorized individual.

National Imaging Associates reported to HHS on 2020-06-12 a Hacking/IT Incident affecting 22560 individuals. Breached information located on Email, Network Server. The incident involved a ransomware attack by a business associate. This case is closed and consolidated into an existing investigation.

National Imaging Associates reported to HHS on 2019-09-17 a Hacking/IT Incident affecting 589 individuals. Breached information located on Email. A former employee was victim of an email phishing scheme affecting ePHI including names, DOB, SSN, and diagnoses. CE notified HHS, individuals, and media, and strengthened technical safeguards.