Nebraska Department of Health and Human Services

The covered entity (CE), Nebraska Department of Health and Human Services, reported that an employee mailed the protected health information (PHI) of 516 individuals to the wrong recipients. The PHI involved included names, identification numbers, dates of birth, and Social Security numbers. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative safeguards to better protect its PHI.