PAHHS OCRFirst filing
Filed Jun 27, 2019bd_33c4e33ec9efccf4
An employee of Byham's Insurance Services (a HIPAA business associate) emailed PHI — names, insurance coverages, carriers, policy numbers, effective dates, and premium amounts — for 1,600 individuals to her husband. The BA notified HHS, affected individuals, and law enforcement, and sanctioned the employee. OCR provided technical assistance (including on media notice obligations) and the BA completed a risk assessment.
Affected (this filing): 1,600
HHS notified