Alabama Department of Rehabilitation Services reported to HHS on 2021-12-20 an Improper Disposal breach affecting 934 individuals. The covered entity sold several audiology devices without removing protected health information, which included names, dates of birth, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Following the breach, it sanctioned the responsible employee and implemented additional administrative safeguards.
Affected (this filing): 934