Four Star Drug of Bethany, Inc.

On August 30, 2016, Four Star Drug of Bethany, Inc. (a Nebraska pharmacy) discovered it had left boxes containing PHI outdoors in an unprotected area; a garbage truck retrieved and transported the boxes to a recycling plant. The breach affected 647 individuals and exposed names, dates of birth, Social Security numbers, clinical/demographic information, claims data, and medication records. The pharmacy department had been sold and closed on May 24, 2016. The CE notified HHS, affected individuals, and the media, and updated its HIPAA disposal policies. OCR obtained documented assurances of corrective action.

Affected (this filing): 647