On December 12, 2013, Complete Medical Homecare (KS) delivered in error a portable computer drive containing PHI — including electronic medical records with patient names, addresses, medical diagnoses, and in some cases Social Security numbers — to its business partner, All American Medical Supplies (AAMS). AAMS accessed the drive but subsequently deleted the data and returned it. Approximately 1,700 individuals were affected. HHS OCR investigated; the CE implemented new HIPAA policies. The CE legally dissolved on December 23, 2015. Breach submitted to HHS on 2014-01-21.
Affected (this filing): 1,700