The covered entity (CE), Center for Autism and Related Disorders, reported that an employee of its business associate (BA) mailed the protected health information (PHI) of 634 individuals to the wrong recipients. The PHI involved included names, claims information, and diagnoses. The CE notified HHS and affected individuals. In response to the breach, the CE worked with the BA to implement additional technical safeguards.
2026-09-25 · sector: other to health · backfill source
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 634 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Center for Autism and Related Disorders, reported that an employee of its business associate (BA) mailed the protected health information (PHI) of 634 individuals to the wrong recipients. The PHI involved included n · backfill source
