The covered entity (CE), HeartShare Wellness, reported that a subcontractor of its business associate (BA) experienced a cybersecurity incident that compromised the protected health information (PHI) of 586 individuals. The PHI involved included names, addresses, and health insurance and treatment information. The subcontractor notified affected individuals and provided substitute notice; the CE notified HHS and the media. OCR provided the CE with technical assistance regarding the HIPAA Privacy and Breach Notification Rules.
Change history
Change history
Sep 23, 2026
Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights ·about this source
Records are reproduced as published; entity names and figures are OCR's.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
Essential cookies only, unless you allow a Google ads cookie. We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our .
