Mountain Area Health Education Center

The covered entity (CE), Mountain Area Health Education Center dba MAHEC, reported that an employee placed documents containing the protected health information (PHI) of 1,115 individuals in an unsecured recycling bin. The PHI involved included names, addresses, dates of birth, Social Security numbers, and health insurance information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned the responsible employees and retrained all staff on the proper disposal methods for PHI.