Marion Eye Center

Marion Eye Center, the covered entity (CE), reported that medical records were sent to a third-party entity; however the records were never received. This breach affected the protected health information (PHI) of 811 individuals. The PHI involved included names, dates of birth, social Security numbers, addresses, and clinical information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In its mitigation efforts, the CE implemented additional administrative and security safeguards.