The business associate (BA), TMG Health, Inc., reported an unauthorized access and disclosure incident involving a contractor and unauthorized third party that affected the protected health information (PHI) of 2,076 individuals. The PHI involved demographic and clinical and financial information. The BA notified HHS, the affected individuals, and the media. In response to the breach, the BA terminated the contractor and implemented additional technical and administrative safeguards.
