NMHHS OCRFirst filing
Filed Oct 14, 2019bd_20f0a2da58d23c12
Southern New Mexico Neurosurgery LLC reported to HHS on 2019-10-14 an Improper Disposal incident affecting 11,754 individuals. The covered entity's former business associate (BA) continued to retain ePHI on its server after termination of the business relationship, and the CE had provided ePHI access without a business associate agreement in place. ePHI involved included names, birthdates, addresses, claims information, and treatment information. The CE notified HHS, affected individuals, and the media, and filed a lawsuit against the BA to require deletion of the ePHI. Breached information located on Electronic Medical Record and Network Server.
Affected (this filing): 11,754
HHS notified