Southern Illinois Hospital Services (IL) reported to HHS OCR on 2017-06-23 an Unauthorized Access/Disclosure affecting 613 individuals. The covered entity's business associate misdirected ePHI — including names, dates of birth, gender, addresses, and health insurance information — to the wrong medical facilities via network server. The CE notified HHS, affected individuals, and media, provided substitute notice, and offered complimentary identity protection services. The BA implemented additional administrative, technical, and security safeguards.
Affected (this filing): 613