HealthReach Community Health Centers (ME) reported to HHS on 2021-07-06 an Improper Disposal breach affecting 122,308 individuals. The covered entity's business associate improperly disposed of hard drives containing PHI, including names, addresses, dates of birth, drivers' license and Social Security numbers, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, offered free credit monitoring, and the BA retrained staff on proper disposal procedures. Breached information located on Electronic Medical Record (hard drives).
Affected (this filing): 122,308