Infosys Public Services, Inc. (“Infosys”)

Infosys Public Services, the business associate (BA) reported that an employee of its subcontractor uploaded the protected health information (PHI) of 2,985 individuals to the Internet. The PHI involved included names, addresses, dates of birth, claims and health insurance information, diagnoses, and other treatment information. To reduce the likelihood of a similar event occurring in the future, Infosys terminated its business relationship with the subcontractor and retrained employees on proper procedures for handling PHI.