The covered entity (CE), Peachtree Immediate Care, reported that an employee of its business associate (BA) mailed letters containing the protected health information (PHI) of 2,555 individuals to the wrong recipients. The PHI involved were names and other demographic information. The CE notified HHS, the affected individuals, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.
