Valley Family Medicine (VA) reported to HHS on 2017-11-03 an Unauthorized Access/Disclosure affecting 8,450 individuals. Two employees took patient listing home; one used it to send postcards advertising his new practice. PHI involved: names and addresses (Paper/Films). No business associate present. CE notified HHS, affected individuals, and the media. Post-breach: updated EHR/billing systems, adopted encryption, and conducted a risk analysis per OCR technical assistance.
Affected (this filing): 8,450