Ryu Physical Therapy

The covered entity (CE), Ryu Physical Therapy, reported that its business associate (BA) exposed the protected health information (PHI) of 500 individuals to unauthorized individuals. The PHI involved included diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE terminated its services with the BA and updated its policies and procedures.