Vincent Vein Center (CO) reported to HHS on 2016-06-07 a Hacking/IT Incident affecting 2,250 individuals. Its business associate, Bizmatics, owned data servers that were accessed by unauthorized persons. Breached ePHI included patients' names, addresses, Social Security numbers, and health visit information, stored in Electronic Medical Records. OCR investigated both the CE and BA; the CE provided written assurances to revise HIPAA policies and procedures.
Affected (this filing): 2,250