The covered entity (CE), Sentara Healthcare, reported that an employee of its business associate posted a file online that contained the protected health information (PHI) of 741 individuals. The PHI involved included names, health insurance information, and claims and treatment information. The CE notified HHS, affected individuals, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to those affected.
