PRHHS OCRFirst filing
Filed Sep 11, 2013bd_ca140bdf1cb14e87
PHMHS (Puerto Rico, Business Associate) reported to HHS on 2013-09-11 a Theft/accidental disclosure affecting 5,000 individuals. A subcontractor (PHM Software Solutions) of the covered entity's BA (PHM Healthcare Solutions) modified a software application that exposed ePHI — including names, gender, member IDs, dates of birth, and consent forms — on the Internet. The BA removed the application upon discovery. OCR investigated and required a risk analysis and risk management plan. Breached information located on Network Server.
Affected (this filing): 5,000
HHS notified