Marketing Clique, a business associate (BA) of Lone Star Circle of Care (the covered entity/CE), reported to HHS on 2015-02-20 an Unauthorized Access/Disclosure affecting 8,700 individuals. The breach resulted from a backup file inadvertently uploaded by the BA onto the CE's website, exposing PHI of patients who used the site for appointments, prescription refills, or other inquiries. The CE secured and removed the file, disabled the mobile app, and terminated the BA agreement. OCR confirmed the BA was no longer in business and provided technical assistance on risk analysis and breach notification. Breached information located in: Other.
Affected (this filing): 8,700