Mid-Cities Home Medical Delivery Service

The covered entity (CE), Mid-Cities Home Medical Delivery Services, LLC, reported that a binder containing protected health information (PHI) flew out of an employee’s vehicle while driving. The breach affected approximately 4,000 patients. The PHI involved included names, addresses, phone numbers, identification numbers, diagnoses, and conditions. The CE provided breach notification to HHS, affected individuals, and the media. Substitute notice was also provided. Following this incident, the CE discontinued the use of binders and revised its policies and procedures to more effectively safeguard PHI. The CE trained workforce members on its revised policies. OCR obtained assurances that the CE implemented the corrective actions noted above.