Reimbursement Technologies, Inc. (PA) reported to HHS OCR on 2013-10-31 an Unauthorized Access/Disclosure breach affecting approximately 2,300 individuals. An employee impermissibly accessed check images stored on a network server. PHI involved included personal check information (bank routing numbers), names, and addresses. The employee was terminated; the breach was reported to the FBI. Remediation included guarantor notifications, credit monitoring offers, enhanced employee monitoring, vendor routing-number truncation, new firewall installation, and HIPAA policy updates. OCR obtained assurance all actions were completed.
Affected (this filing): 2,300