Supportive Concepts for Families, Inc.

Supportive Concepts for Families, Inc. (PA) reported to HHS OCR on 2014-02-13 an Unauthorized Access/Disclosure affecting 593 individuals. The CE inadvertently made an internal database containing ePHI accessible on the Internet. Exposed data included names, dates of birth, SSNs, addresses, dates of services, and customer service notes. The CE removed the database, notified affected individuals and media, sanctioned responsible employees, and enhanced HIPAA training and risk analysis remediation. Breached information located on Network Server.

Affected (this filing): 593