The covered entity (CE), Wisconsin Department of Corrections, reported that protected health information (PHI) was viewable on several websites managed by its business associate (BA). This breach compromised the PHI of 1,853 individuals. The PHI involved included names and addresses. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA strengthened its technical safeguards to better protect PHI.
