TEXASHHS OCRFirst filing
Filed Mar 17, 2014bd_e3be53cba2873311
TMA Practice Management Group (Business Associate, TX) reported to HHS OCR on 2014-03-17 an Improper Disposal/Loss breach affecting 2,260 individuals. McBroom Clinic, PA (the covered entity) copied patient PHI — including clinical and insurance/payment information — to an unencrypted USB flash drive and sent it to the BA on January 7, 2014. The BA received an empty package and discarded it. Breached information was located on an Other Portable Electronic Device. OCR investigation prompted encryption procedures, risk analysis, and staff training improvements.
Affected (this filing): 2,260
HHS notified