Leggett & Platt Incorporated Employee Benefit Fund

The covered entity (CE), Leggett & Platt Incorporated Employee Benefit Fund, reported that a software application used by its business associate (BA) exposed the protected health information (PHI) of 1,200 individuals. The PHI involved included Social Security numbers, claims, and treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. This case has been consolidated into another breach investigation.