PAHHS OCRFirst filing
Filed Mar 23, 2017bd_481264657f17efeb
WellSpan Health (Health Plan, PA) reported to HHS on 2017-03-23 an Unauthorized Access/Disclosure affecting 732 individuals. A software error caused a business associate to misaddress EOB letters, delivering them to unintended recipients. PHI exposed included names, addresses, and clinical/diagnostic information (Paper/Films). The BA implemented a new audit process and retrained staff; OCR reviewed the covered entity's privacy and security policies.
Affected (this filing): 732
HHS notified