Mediko, Inc. (VA) reported to HHS on 2022-10-31 an Unauthorized Access/Disclosure affecting 2,809 individuals. Breached information was located on a Network Server. The covered entity's business associate inadvertently posted PHI — including names, dates of birth, Social Security numbers, diagnoses, and other treatment information — on the Internet. Mediko notified HHS, affected individuals, the media, and posted a substitute notice. Remediation included credit monitoring, additional technical safeguards, policy revisions, and workforce retraining.
Affected (this filing): 2,809