University Medical Center of Southern Nevada

The covered entity (CE), University Medical Center of Southern Nevada, reported that an employee of its business associate (BA) uploaded the protected health information (PHI) of 1,833 individuals to the Internet. The PHI involved included names, dates of birth, Social Security numbers, diagnoses, claims information, Social Security numbers, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided affected individuals with complimentary credit monitoring services and the BA and CE implemented additional technical safeguards.