South Sunflower County Hospital (MS) reported to HHS on 2015-02-04 an Improper Disposal breach affecting 19,000 individuals. A local merchant used shredded hospital documents containing PHI as packing material. Exposed PHI included dates of service, provider names, diagnoses, patient names, Social Security numbers, and dates of birth for 19,345 individuals. The hospital retrieved remaining documents, notified affected individuals and media, contracted a shredding vendor, and began converting records to electronic format. OCR reviewed the CE's HIPAA policies and procedures.
Affected (this filing): 19,000