norm: ahrc nassauUSno LEI · no CIKMax severity: Medium

Canonical registry

AHRC Nassau

ent_fe60db587036066443fa4bbc

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

1,200

nationwide · HHS OCR NY

Leak-site claims

0

none in sample

Identity resolution

Canonical name: AHRC Nassau
Normalized: ahrc nassau— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: ahrc.org

Disclosure history (1)newest first

NEW YORKHHS OCRas victim2016-01-06
AHRC Nassau (NY) reported to HHS on 2016-01-06 an Unauthorized Access/Disclosure affecting 1,200 individuals. The covered entity mailed questionnaire surveys that inadvertently contained other clients' PHI, including 1,638 clients' names and types of services received. Breached information was on Paper/Films. The CE notified HHS, affected individuals, and media, and implemented a two-tier mailing list verification process and HIPAA retraining for IT staff. OCR obtained assurances of corrective action.