The covered entity (CE), Managed Health Services, reported that its business associate (BA) sent documents that contained the protected health information (PHI) of 11,988 individuals to the wrong recipients. The PHI involved included names, addresses, dates of birth, and health insurance information. The CE notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional administrative safeguards.
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · disclosed: 2021-12-27 to 2021-01-08 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Managed Health Services, reported that its business associate (BA) sent documents that contained the protected health information (PHI) of 11,988 individuals to the wrong recipients. The PHI involved included names, · backfill source