The business associate (BA), Hawaii Pacific Health, reported that a logbook containing the protected health information (PHI) of 836 individuals was missing. The PHI involved included names, addresses, birthdates, diagnoses, and other clinical information. The BA notified HHS, affected individuals, and the media. Following the breach, the BA discontinued the use of logbooks and retrained its staff on the importance of safeguarding PHI. OCR obtained assurances that the BA implemented the corrective actions noted.
