The covered entity (CE), Health Net, LLC, reported that it mailed the protected health information (PHI) of 2,404 individuals to the wrong recipients. The PHI involved included names, dates of birth, Social Security numbers, claims information, health insurance information, and treatment information. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its data. OCR obtained assurances that the CE implemented the corrective actions noted.
