Lifestyle Therapy & Coaching (AL) reported to HHS on 2017-10-09 an Unauthorized Access/Disclosure affecting 550 individuals. On June 16, 2017, the CE inadvertently left an unsecured electronic form on its website that allowed searching the client directory. A former client discovered and reported the issue on August 13, 2017; the CE immediately secured it. Exposed data included names, addresses, phone numbers, and email addresses for 551 individuals. Breached information located on Network Server. OCR investigation resulted in corrective actions including additional access controls and revised training.
Affected (this filing): 550