Provider Network Solutions of Puerto Rico

MSO of Puerto Rico, Inc. (a Business Associate) reported to HHS OCR on 2010-02-17 a Theft-classified breach affecting 1,907 individuals. The BA erroneously merged two mailing lists, disclosing PHI—including names, internal ID numbers, and number of emergency room visits—via Paper/Films. The BA established a quality control process for outgoing mail; the CE implemented additional QC policies and retrained all staff on privacy and security procedures following OCR investigation.

Affected (this filing): 1,907

MSO of Puerto Rico reported to HHS on 2010-02-17 a Theft affecting 605 individuals. Breached information located on Paper/Films. The business associate erroneously merged two lists, disclosing PHI (names, ID numbers, ER visits). Remediation included establishing quality control processes for mailings and staff training.

Affected (this filing): 605