INDIANAHHS OCRFirst filing
Filed Nov 29, 2016bd_16789c62433d00e1
Managed Health Services (IN, Health Plan) reported to HHS OCR on 2016-11-29 an Unauthorized Access/Disclosure affecting 5,500 individuals. A contract employee improperly emailed Excel files containing PHI — including names, addresses, dates of birth, diagnoses/conditions, clinical information, and medications — to his personal email account. Breached info was located on Email and Laptop. The CE sanctioned the employee, implemented technical safeguards, and completed OCR-required focused HIPAA Privacy Rule training. OCR obtained assurances of corrective action.
Affected (this filing): 5,500
HHS notified