TMC HealthCare

On July 12, 2018, the covered entity (CE), TMC HealthCare, discovered that paper files containing the protected health information (PHI) of 1,776 individuals had inadvertently been left unsecured in an unlocked suite used for storage. The types of unsecured PHI involved in the incident included patients' names, dates of birth, addresses, medical record numbers, insurance ID or Social Security numbers, diagnoses, treatment information, provider information, medications, test results, and other clinical information. Following discovery of the incident, the CE secured the files and provided breach notification to affected individuals, prominent media outlets, and the Secretary of HHS. OCR obtained assurances that the CE implemented the corrective action steps listed above.