ILHHS OCRFirst filing
Filed Nov 6, 2015bd_bd9cd40537d6a8c2
On September 9, 2015, business associate Standard Register erroneously mailed retirement announcements on behalf of Rush University Medical Center (IL), resulting in misdirected letters sent to 1,529 wrong patients. Breached information (paper/films) included patients' names only. The covered entity notified HHS, media, and affected individuals, published substitute notice, entered into a BA agreement with Standard Register, and established quality-control procedures for mass mailings. OCR confirmed corrective actions were implemented.
Affected (this filing): 1,529
HHS notified