Gordon Schanzlin New Vision Institute

On June 15, 2018, the U.S. Postal Inspection Service (USPIS) notified the covered entity (CE) that a box containing protected health information (PHI) related to 59 patients was recovered during a raid of a private residence conducted by USPIS the previous day. The CE determined that the presence of the PHI in the residence was likely related to an unauthorized entry into a storage unit which occurred on October 25, 2017, and that 10,130 individuals’ PHI may have been affected by the breach incident. The types of PHI involved in the breach included demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media and provided individuals with free credit monitoring. In response to the breach, the CE relocated PHI to a more secure location and sanctioned workforce members. In response to OCR’s investigation the CE revised policies and procedures and retrained workforce members.