The covered entity (CE), Healthfirst, reported that a misconfiguration in its software caused the protected health information (PHI) of 5,048 individuals to be sent to the wrong recipients. The PHI involved included names, phone numbers, and health insurance information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services, revised its policies and procedures, and retrained its employees.
