The covered entity (CE), OB Pharmacy (OB), reported that an unauthorized individual uploaded music files to its document storage system. The storage system did not contain protected health information (PHI) and it was therefore determined that a breach did not occur. OCR provided technical assistance to OB on its obligations under the Security Rule.
Affected (this filing): 3,241