Valley Mountain Regional Center, the business associate (BA), reported that an employee posted the protected health information (PHI) of 529 individuals on its website. The PHI involved included names, addresses, phone numbers, and other identifiers. The BA notified HHS, the affected individuals, and the media. In its mitigation efforts, the BA revised its policies and procedures and implemented additional administrative and security safeguards.
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 529 · backfill source
2026-09-25 · summary: empty to Valley Mountain Regional Center, the business associate (BA), reported that an employee posted the protected health information (PHI) of 529 individuals on its website. The PHI involved included names, addresses, phone numbers, and other id · backfill source
