Michiana Hematology Oncology

The covered entity (CE), Michiana Hematology Oncology, PC, reported that the protected health information (PHI) of approximately 500 individuals was improperly discarded by its business associate (BA). The PHI involved included names, addresses, dates of birth, Social Security numbers, financial and medical information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE properly disposed of the medical records and revised its policies and procedures to better protect its PHI. OCR obtained assurances that the CE implemented the corrective actions noted.