Toth Enterprises II d/b/a Victory Medical reported that an unauthorized person uploaded a paper-based report to a third-party website. The report contained the protected health information of 2,000 individuals, including demographic information and medical account numbers. In response, the company conducted a new risk analysis, developed a new risk management plan, implemented improved administrative safeguards, developed new policies, and retrained staff.
Affected (this filing): 2,000