FEDERALHHS OCRFirst filing
Filed Nov 27, 2018bd_36124e64ed12ea1b
AccuDoc Solutions, Inc., a healthcare business associate based in NC, discovered on 2018-09-29 that an unauthorized user had gained access to a web server containing ePHI for seven covered-entity clients, affecting 2,652,537 individuals. Exposed ePHI included demographic information, account balances, and insurance policy information; AccuDoc states no data was exfiltrated. AccuDoc terminated the unauthorized access, improved technical safeguards, and (with the CEs) issued required notifications. AccuDoc reported to HHS on behalf of six of the seven CEs; one CE filed independently. OCR obtained corrective-action assurances.
Affected (this filing): 2,652,537
HIPAA 60-day OK · 59dHHS notified · 59d