The business associate (BA), Optum, reported that an employee of its vendor mailed the protected health information (PHI) of 1,584 individuals to incorrect addresses. The PHI involved included names, addresses, claims information, and treatment information. The BA notified HHS, the affected individuals, and the media. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect PHI.
