The business associate (BA), CVS Caremark reported that it experienced a breach incident that affected the protected health information (PHI) of 2,599 individuals. The PHI involved included demographic information. The BA notified HHS, the affected individuals, and the media. In response to the breach, the BA retrained employees and implemented administrative, technical and security safeguards.