The covered entity (CE), Community Health Choice, Inc., reported that its business associate mailed documents containing the protected health information (PHI) of 2,489 individuals, to the wrong recipients. The PHI involved included names, mailing addresses, and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice.
