SimplyWell, a sub-contractor business associate in TX, reported to HHS on 2018-06-01 an Unauthorized Access/Disclosure affecting 597 individuals. A workforce member accidentally uploaded a file containing PHI (names, dates of birth, and smoking status) to an online portal where it was potentially viewable by covered entity members. Breached information located on Other. OCR reviewed policies and procedures, found them compliant. The BA retrained the involved member and issued reminders to all workforce members.
Affected (this filing): 597