Methodist Le Bonheur Healthcare

The covered entity (CE), Methodist Le Bonheur Healthcare, reported that its employees impermissibly disclosed the protected health information (PHI) of 1,370 individuals. The PHI involved included names and telephone numbers. The CE notified HHS, affected individuals, the media, and local law enforcement. In response to the breach, the CE sanctioned the responsible employees and retrained its staff on the HIPAA Privacy Rule.