On June 25, 2015, Episcopal Health Services Inc. reported a data breach to HHS affecting 509 individuals. The incident was a result of theft by an employee of its business associate, Zotec Partners, LLC, who sold patient data. The compromised information included names, Social Security numbers, dates of birth, addresses, and detailed protected health information. In response, the business associate implemented enhanced security controls and training. OCR opened an investigation into the matter.
Affected (this filing): 509