MONTANAHHS OCRFirst filing
Filed Mar 20, 2021bd_679e91b670ddeb26
River City Whole Health, Ltd. (MT) reported to HHS OCR on 2021-03-20 an Unauthorized Access/Disclosure affecting 2,714 individuals. Several former employees used their still-active usernames and passwords to access ePHI after termination. Breached information located on Electronic Medical Record, Laptop, and Paper/Films and included names, addresses, dates of birth, Social Security numbers, claims information, diagnoses, and other treatment information. The CE strengthened administrative and technical safeguards and received OCR technical assistance.
Affected (this filing): 2,714
HHS notified