WISCONSINHHS OCRFirst filing
Filed Apr 1, 2016bd_08c0c56496a9a719
Aurora Health Care, Inc. (WI) reported to HHS on 2016-04-01 an Unauthorized Access/Disclosure affecting 869 individuals. Breached information was located on a Network Server. A business associate, American College of Cardiology Foundation, inadvertently disclosed patient PHI to one of its vendors without a BA agreement. Exposed data included names, dates of birth, Social Security numbers, and registry identification numbers. The CE investigated, destroyed the data, suspended access, and implemented corrective controls. OCR reviewed policies and obtained documented assurances of remediation.
Affected (this filing): 869
HHS notified