National Imaging Associates

The covered entity (CE), National Imaging Associates, reported that an employee of its business associate (BA) impermissibly shared the protected health information (PHI) of 744 individuals with an unauthorized individual. The PHI involved included names, addresses, dates of birth, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA sanctioned the workforce member involved and implemented additional administrative, technical, and security safeguards to better protect PHI. All staff were retrained.