Prestige Health Choice

The covered entity (CE), Prestige Health Choice, reported that an employee impermissibly downloaded the electronic protected health information (ePHI) of 4,665 individuals to a personal hard drive. The ePHI involved included names, addresses, treatment information, and health insurance information. The CE notified HHS, affected individuals, and the media. The CE also provided complimentary credit monitoring service to affected individuals. In response to the breach, the CE sanctioned the responsible employee and enhanced its security safeguards. OCR obtained assurances that the CE implemented the corrective actions noted.