NJHHS OCRFirst filing
Filed Oct 23, 2012bd_4e2d7b2f6a3c34e3
From May 1 to August 5, 2011, two employees of First Step Counseling, Inc. (NJ) made unauthorized photocopies of documents containing 638 patients' PHI — including names, insurance numbers, diagnoses, dates of birth, phone numbers, and SSNs — and disclosed them to their personal attorney. The CE notified HHS, affected individuals, and the media. Following an OCR investigation, the CE implemented corrective actions including an electronic billing system, locked patient files, and physical front-desk safeguards. Breached information located on Paper/Films.
Affected (this filing): 638
HHS notified