Mid Continent Credit Services, Inc. (KS), a business associate of Lawrence Memorial Hospital, reported a breach to HHS on 2011-11-14 affecting 8,275 individuals. A security update performed by the BA on the CE's website potentially allowed impermissible disclosure of ePHI including names, addresses, demographic information, and credit card/bank account numbers. The CE shut down its website, removed cached ePHI pages, terminated the BA relationship, offered credit monitoring, and updated policies following an OCR investigation. Breached information located on: Other.
Affected (this filing): 8,275