The covered entity (CE), Texas Spine Consultants reported that a misconfigured server enabled the protected health information (PHI) of 25,728 individuals to be searchable on the Internet. The PHI involved included names, dates of birth, and radiologic images. OCR consolidated this breach with an existing compliance review.
