NEW YORKHHS OCRFirst filing
Filed Jan 6, 2016bd_dc42ddc049542c85
AHRC Nassau (NY) reported to HHS on 2016-01-06 an Unauthorized Access/Disclosure affecting 1,200 individuals. The covered entity mailed questionnaire surveys that inadvertently contained other clients' PHI, including 1,638 clients' names and types of services received. Breached information was on Paper/Films. The CE notified HHS, affected individuals, and media, and implemented a two-tier mailing list verification process and HIPAA retraining for IT staff. OCR obtained assurances of corrective action.
Affected (this filing): 1,200
HHS notified