National Imaging Associates, Inc.

National Imaging Associates, Inc. (NIA) disclosed a breach involving a Physician Clinical Reviewer (PCR) who unauthorizedly shared his screen via Zoom with a non-employee guest, granting them remote access to health plan member records. The incident occurred between November 1, 2021, and March 8, 2022. Affected data included health information (diagnosis, treatment, test results) and demographic data (name, address, DOB, member ID). NIA suspended the employee, terminated them, and offered 12 months of Experian IdentityWorks.

National Imaging Associates, Inc. reported to HHS on 2022-04-22 a Unauthorized Access/Disclosure affecting 616 individuals. Breached information located on Laptop. An employee of the business associate impermissibly shared PHI (names, addresses, DOB, diagnoses, lab results, medications) with an unauthorized individual.

Affected (this filing): 616

National Imaging Associates, Inc. (MD) reported to HHS OCR on 2022-05-02 an Unauthorized Access/Disclosure affecting 744 individuals. A business associate employee impermissibly shared PHI — including names, addresses, dates of birth, diagnoses, lab results, medications, and treatment information — with an unauthorized individual via laptop. The BA sanctioned the workforce member, implemented additional safeguards, and retrained all staff. The CE notified HHS, affected individuals, and the media.

Affected (this filing): 744