Southwestern Eye Center

Southwestern Eye Center (AZ) reported to HHS on August 1, 2018 an Unauthorized Access/Disclosure affecting 667 individuals. During a mass mailing of patient refund checks in April 2018, the CE's business associate used an electronic mail merge that mixed up patient names and addresses on paper refund checks. Breached information included demographic data. The CE re-issued checks, terminated the BA contract, implemented auditing controls, and revised its mailing validation procedure.

Affected (this filing): 667