The covered entity (CE), National Imaging Associates, reported that an employee of its business associate (BA) impermissibly shared the protected health information (PHI) of 744 individuals with an unauthorized individual. The PHI involved included names, addresses, dates of birth, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA sanctioned the workforce member involved and implemented additional administrative, technical, and security safeguards to better protect PHI. All staff were retrained.
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 744 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), National Imaging Associates, reported that an employee of its business associate (BA) impermissibly shared the protected health information (PHI) of 744 individuals with an unauthorized individual. The PHI involved · backfill source
