GAHHS OCRFirst filing
Filed Aug 14, 2014bd_204859ae568198ae
On December 1, 2013, a subcontractor of 24 ON Physicians PC/In Compass Health Inc. (a former business associate of Williamson Medical Center) unintentionally made a network server containing PHI accessible on the internet. Exposed data included names, dates of service, charge amounts, and billing codes for 520 patients. The server was removed from public access, subcontractor data was destroyed, and cached pages were cleared. Breach reported to HHS on 2014-08-14. OCR reviewed the BA agreement and Breach Notification Rule policy and found them sufficient.
Affected (this filing): 520
HHS notified