Memorial Healthcare (MI) reported to HHS OCR on 2017-04-03 an Unauthorized Access/Disclosure affecting 685 individuals. Business associate RevSpring inadvertently mailed PHI to wrong recipients. Breached information located on Paper/Films. PHI involved included names, account information, treatment information, and financial information. The CE notified HHS, affected individuals, and the media. Credit monitoring was offered; RevSpring implemented administrative safeguards; CE revised its BA agreement per OCR corrective action assurances.
Affected (this filing): 685