Integrated Health Solutions

The covered entity (CE), Integrated Health Solutions (IHS), notified HHS of a potential breach of unsecured electronic protected health information (ePHI) through its business associate (BA), Bizmatics. Specifically, the BA experienced a hacking or information technology incident which may have exposed up to 19,776 of the CE's patient records. OCR obtained a copy of the signed BA agreement between the CE and BA. OCR obtained assurances from the CE that all Security Rule policies and procedures are in place. This review has been consolidated into another review of this BA.