Danube River Holdings

The covered entity (CE), Danube River Holdings, LLC, dba RiverPointe Post Acute, reported that a USB flash drive containing the electronic protected health information (ePHI) of 633 individuals was lost in the mail. The ePHI involved included names, health insurance information, Social Security numbers, and treatment information. The CE notified HHS, affected individuals, and the media. Upon discovery of the breach, the CE worked with the USPS to investigate the incident and confirm that the USB device was lost. The CE offered complimentary credit monitoring and identity theft monitoring services to affected individuals. In its mitigation efforts, the CE sanctioned the responsible employee and retrained its employees on safeguarding ePHI. During the investigation, OCR provided the CE with technical assistance.