County of Kings, State of California

The covered entity (CE), County of Kings, State of California, reported that a misconfiguration on its public web server resulted in the protected health information (PHI) of 16,590 individuals appearing on the Internet. The PHI involved included names, dates of birth, addresses, and COVID-19 information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative and technical safeguards and retrained its workforce members to better protect its PHI.