The covered entity (CE), Memphis Pathology Laboratory dba American Esoteric Laboratories, reported that its business associate (BA) experienced a breach that affected the electronic protected health information (ePHI) of 417,146 individuals. The ePHI involved included names, addresses, phone numbers, dates of birth, financial information, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE terminated its business relationship with the BA. The CE also strengthened its administrative safeguards to better protect its ePHI.
