Henderson County Urgent Care Centers

Henderson County Urgent Care Centers, Inc., the covered entity (CE), reported that one of its office buildings had been burglarized and the protected health information (PHI) of 590 individuals were viewable. The PHI involved included names, telephone numbers, birthdates, Social Security numbers, lab results, and drivers’ license numbers. The CE notified HHS, the media, and posted substitute notice on its website. In response to this breach, the CE implemented enhanced physical security safeguards to better protect its sensitive data. OCR obtained assurances that the CE implemented the corrective actions noted.