Gainwell Technologies, a business associate (BA), reported that a mailing error caused by a subcontractor compromised the protected health information (PHI) of approximately 3,317 individuals. The PHI involved included names, Social Security numbers, dates of birth, and claims information. The BA notified HHS, affected individuals, and the media. OCR has initiated a compliance review of the subcontractor responsible for the breach.
