Wind River Family and Community Health Care

The covered entity (CE), Wind River Family and Community Health Care, reported that a spreadsheet containing the protected health information (PHI) of 8,946 individuals was sent to the wrong recipient. The PHI involved included names, dates of birth, addresses, lab results, and diagnoses. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative safeguards to better protect its PHI. OCR provided technical assistance to the CE regarding the HIPAA Security and Breach Notification Rules.