Practolytics LLC (a business associate, SC) reported to HHS OCR on 2022-01-18 an Unauthorized Access/Disclosure affecting 1,125 individuals. ePHI was inadvertently posted to the Internet from Electronic Medical Records. Exposed data included names, addresses, dates of birth, Social Security numbers, and treatment information. The BA notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Breach Notification Rule.
Affected (this filing): 1,125