Cogent Healthcare, Inc. (TN), a business associate providing management services for 24 hospitalist service providers, reported a breach to HHS on 2013-08-30 affecting approximately 32,000 individuals. The BA's privacy officer discovered that PHI was publicly accessible on an FTP Internet site. Exposed data included patient names, physicians' names, dates of birth, diagnoses, treatment summaries, medical histories, and medical record numbers. OCR determined the incident predated the Sept. 23, 2013 BA enforcement date and provided technical assistance.
Affected (this filing): 32,000