ILHHS OCRFirst filing
Filed Oct 15, 2018bd_3f1a50a16cebe15e
HealthFitness (Health Fitness Corporation), a business associate in IL, reported to HHS OCR on 2018-10-15 an Unauthorized Access/Disclosure affecting 20,790 individuals. Beginning approximately August 2015, ePHI became discoverable on the internet due to a software misconfiguration on the server, exposing it to web crawlers. The breach was discovered on June 27, 2018. OCR settled for $227,816 under its Risk Analysis Initiative.
Affected (this filing): 20,790
HIPAA 60-day late · 110d