Limeade, Inc. (a Business Associate based in WA) reported to HHS on 2021-10-15 an Unauthorized Access/Disclosure affecting 2,287 individuals. A software bug in Limeade's web platforms and applications intermittently allowed trackable activities to be viewable by other users, exposing PHI including names and wellness activities stored on Desktop Computer and Other Portable Electronic Device. The BA notified HHS and affected individuals, trained its engineering team, and implemented additional technical safeguards. OCR provided technical assistance.
Affected (this filing): 2,287