Unlimited Medical Services of Florida

The covered entity (CE), Unlimited Medical Services of Florida, LLC, dba DNF Medical Centers, reported that an employee impermissibly sent patient laboratory samples to an unauthorized lab. The samples contained the protected health information (PHI) of 846 individuals. The PHI involved included names, addresses, dates of birth, partial Social Security numbers, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to this incident, the CE sanctioned the responsible employee and retested the lab samples at no cost to the patient or their insurance company. The CE also revised its procedures to better protect its sensitive data. OCR obtained assurances that the CE implemented the corrective actions noted.