Peter J Parker, M.D., Inc.

A former employee of a business associate (BA), Delta Billing Solutions, obtained another agent’s login information to delete, change, rearrange, and otherwise alter patient information in the Dr. Chrono billing system from April 18 to April 20, 2018. The breach affected 628 individuals who were patients of Peter J. Parker, MD, Inc., the covered entity (CE). The protected health information (PHI) involved included full names, addresses, dates of birth, some social security numbers, insurance billing information, and billing codes. The CE provided breach notification to HHS, affected individuals, and the media and also provided substitute notice. In response to the breach, BA reported the incident to law enforcement, used audit logs to verify that no downloads or exports were recorded, corrected all changes made by the former employee, and changed passwords on employee accounts to ensure no further access occurred. In addition, in response to OCR’s provision of technical assistance, the covered entity provided OCR with a revised, compliant BA agreement with the BA.