WVHHS OCRFirst filing
Filed Apr 11, 2017bd_3b5097a8d4eca90a
Amedisys West Virginia, LLC reported to HHS on 2017-04-11 an Improper Disposal breach affecting 611 individuals. The BA Iron Mountain, through its subcontractor D&M, improperly disposed of two unlocked shred bins containing PHI (paper/films). PHI exposed included names, addresses, dates of birth, SSNs, and clinical information. The CE notified HHS, affected individuals, and the media. Corrective actions included elimination of subcontractor use and improved shred bin security. OCR reviewed risk analysis and BA agreements.
Affected (this filing): 611
HHS notified