Wal-Mart Stores, Inc., the covered entity (CE), reported that the electronic protected health information (ePHI) of 741 individuals was disclosed when a system error caused information about a patient to be viewed by the wrong patient via notification through the CE's app or an e-mail. The types of ePHI disclosed included names and prescription information. The CE provided breach notification to HHS, affected individuals, and the media. As a result of OCR's investigation, the CE provided evidence it implemented improved technical safeguards to prevent similar incidents.
