Bulloch Pediatric Group, LLC (GA) reported to HHS on 2014-09-04 an Unauthorized Access/Disclosure affecting ~10,000 individuals. Two locked storage units rented by the CE were burglarized for metal shelves; boxes of PHI were strewn on the floor. Documents included EOBs, cleared checks, credit card info, balance sheets, SSNs, and names/addresses. Breached info located on Paper/Films. CE notified HHS, individuals, and media; offered free credit monitoring; relocated documents to a more secure facility; and destroyed records per state retention laws. OCR obtained corrective-action assurances.
Affected (this filing): 10,000