Options Counseling Center (NJ) reported to HHS OCR on 2014-05-09 a Theft/Unauthorized Access breach affecting 2,828 individuals. Between May 1 and July 29, 2011, an employee (insider) photocopied and printed PHI from the computer system and disclosed documents to their attorney. PHI included names, counseling attendance records, addresses, DOBs, health insurance info, account balances, and 46 SSNs. Breached information was on Paper/Films. CE destroyed disclosed PHI, retrained staff, restricted physical access, and migrated to an electronic billing system with role-based access. OCR confirmed corrective actions.
Affected (this filing): 2,828