Sanitas Dental Management

The covered entity (CE), Sanitas Dental Management, reported that a computer server containing the electronic protected health information (ePHI) of 1,310 individuals, was accidentally thrown away. The ePHI involved included names, Social Security numbers, addresses, drivers’ license numbers, birthdates, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE strengthened its administrative and physical safeguards. OCR obtained assurances that the CE implemented the corrective actions noted.