The business associate (BA), RevSpring, reported that a software coding error allowed the protected health information (PHI) of 1,053 individuals to be viewable by others. The PHI involved included names, addresses, diagnoses and other treatment information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional administrative, technical, and security safeguards. Workforce members were also retrained on the requirements to protect and secure sensitive data.
