Premier Family Care I

On April 8, 2016, representatives of Midland Memorial Hospital notified the covered entity (CE), Premier Family Care I, Inc., that some of the CE's patient documents had been discovered, unsecured, in a room of a former employee’s residence during foreclosure proceedings. The documents contained the protected health information (PHI) of approximately 1,326 individuals and included patients' names, dates of birth, social security numbers, addresses and zip codes, diagnoses/conditions, lab results, medications and other treatment information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE secured the involved records, updated its HIPAA policies, and retrained staff. OCR obtained assurances that the CE implemented the corrective actions listed above.