Health Data Breach Tracker/PR

Business Associate · Archived

MSO of Puerto Rico, Inc.

1,907 individuals · submitted February 17, 2010

About this report

The covered entity's (CE) business associate (BA) erroneously merged two lists which led to the disclosure of protected health information (PHI) of 1,907 individuals. The PHI included names, internal identification numbers, and the number of emergency room visits. Upon discovery of the breach, the CE's BA established a quality control process in order to ensure adequate safeguards for that letters that are sent by mail. As a result of OCR's investigation, the CE created and implemented additional policies and procedures for quality control of mailings. The CE also provided training to all staff on its revised privacy and security policies and procedures. \ \ \

Summary as published by the HHS Office for Civil Rights.

Organization
MSO of Puerto Rico, Inc.
State
PR
Entity type
Business Associate
Individuals affected
1,907
Submission date
February 17, 2010
Breach type
Theft
Location of information
Paper/Films
Business associate present
Yes
OCR status
Archived

More breach reports in PR

More Theft reports