MONTANAHHS OCRFirst filing
Filed Jan 11, 2012bd_c278c3e1a4938b18
RightNow Technologies (a software vendor and business associate for MDwise) reported to HHS on 2012-01-11 an Unauthorized Access/Disclosure affecting approximately 2,700 individuals. A software switch was not disabled, allowing Google to index files on MDwise's hosted website containing ePHI including individuals' names, addresses, zip codes, Medicaid numbers, and primary care physicians' names and addresses. The CE removed the files, blocked search-engine indexing, obtained Google's cooperation to de-index within 24 hours, and improved technical safeguards under the HIPAA Security Rule. OCR obtained assurances that all corrective actions were implemented.
Affected (this filing): 2,700
HHS notified