Accuprint (a Business Associate in Puerto Rico) reported to HHS on 2011-08-15 a Theft/misdelivery incident affecting 5,848 individuals. The BA erroneously mailed EOB letters containing PHI — including names, addresses, CPT codes, providers' names, and dates of service — to the wrong individuals. Location of breached information: Other. OCR investigated, provided technical assistance on the Breach Notification Rule, and verified a proper BA agreement was in place. Remediation included new QC policies and BA software validation of EOBs before mailing.
Affected (this filing): 5,848