Catalina Post-Acute Care and Rehabilitation

Catalina Post-Acute Care and Rehabilitation (CPACR) discovered that paper documents containing protected health information (PHI) for approximately 2,953 individuals were left unattended and accessible to the public. The exposed data included names, dates of birth, addresses, Social Security numbers, driver's license numbers, claims information, clinical information, and financial information. In response, CPACR offered free credit monitoring, implemented new safeguards, updated policies, and retrained its staff.