North Dakota Department of Human Services (a state Health Plan) reported to HHS OCR on 2017-06-01 an Improper Disposal breach affecting 2,452 individuals. A workforce member disposed of PHI-containing documents in a dumpster. Exposed PHI included names, dates of birth, Medicaid provider numbers, dates of service, diagnosis codes, procedure codes, and billing information (Paper/Films). The responsible workforce member resigned in lieu of termination. The CE retrained staff, revised PHI-related policies, and provided OCR with written assurance of full workforce training on updated policies.
Affected (this filing): 2,452