ARHHS OCRFirst filing
Filed Oct 16, 2015bd_d272d8ae954b1228
On July 30, 2015, a physician at Nephropathology Associates, PLC (AR) emailed a spreadsheet containing 1,260 patients' names and clinical information to an outside vendor under consideration for a potential project — an impermissible disclosure. The CE notified referring hospitals, HHS, and affected individuals. The vendor confirmed destruction of all PHI received. The CE issued a written warning and retraining to the responsible employee and obtained OCR assurance of corrective action completion. Breached information was located in Email.
Affected (this filing): 1,260
HHS notified