Hanger Prosthetics & Orthotics, Inc., dba Hanger Clinic, the covered entity (CE), reported that employees of its storage facility improperly disposed of documents containing the protected health information (PHI) of approximately 6,033 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE secured the remaining documents and terminated its lease with the storage facility. OCR obtained assurances that the CE implemented the actions noted.
