Centers for Medicare & Medicaid Services (MD) reported to HHS on 2023-04-07 an Unauthorized Access/Disclosure affecting 10,011 individuals. A business associate employee inadvertently mailed PHI — including names, addresses, claims information, diagnoses, and other treatment information — to the wrong recipients via paper/films. The BA implemented additional administrative and technical safeguards in response. Affected individuals, the media, and HHS were notified; substitute notice was provided.
Affected (this filing): 10,011