Louisiana Healthcare Connections

Louisiana Healthcare Connections, the covered entity (CE), reported that a former workforce member downloaded the electronic protected health information (ePHI) of 13,086 individuals. The types of ePHI included full names, Medicaid identification numbers and effective dates, dates of birth, phone numbers, and address information. The CE provided breach notification to HHS, affected individuals, and the media. It also notified law enforcement. Additionally, the CE implemented improved administrative and technical safeguards, disabled the involved workforce member's account access, revised policies and procedures, and retrained staff. OCR obtained documented assurances that the CE implemented the corrective actions listed above.