The Houston Health Department (TX) reported to HHS OCR on 2022-02-24 an Unauthorized Access/Disclosure affecting 10,291 individuals. The covered entity's business associate accidentally posted PHI — including names, dates of birth, addresses, email addresses, lab results, and treatment information — on its public website. The CE notified HHS, affected individuals, the media, provided substitute notice, offered complimentary credit monitoring, and implemented additional technical safeguards. Breached information was located in Electronic Medical Records.
Affected (this filing): 10,291