SAY San Diego

SAY San Diego, a California healthcare provider, reported to HHS on 2017-12-22 a Loss affecting 1,272 individuals. On October 27, 2017, the CE was notified that a citizen had returned paper files containing PHI found in a filing cabinet purchased from a salvage store. Files related to youth participants in a dual diagnosis program (Jan–Jun 2013) included clinical and demographic information. The CE notified individuals, media, and HHS, offered free identity monitoring, revised its PHI disposal policy, and provided additional workforce training following OCR investigation.

Affected (this filing): 1,272

SAY San Diego notified the California AG of a physical data breach involving paper files from its Dual Diagnosis youth program (Jan-Jun 2013). Files containing names and service details were found in a filing cabinet at a salvage store after being inadvertently left by an employee during an office move. No SSNs or financial data were involved. Kroll identity monitoring was offered.