Pulse Systems, Inc.

Pulse Systems, Inc., the business associate (BA) of Lincoln Pulmonary & Critical Care Associates, the covered entity (CE), reported that protected health information (PHI) was inadvertently mailed to the wrong recipients. This breach affected 722 individuals and the PHI involved included names and clinical information. The BA notified HHS, affected individuals, the media, and provided substitute notice. To mitigate this breach, the BA implemented additional administrative safeguards and retrained its staff. OCR obtained assurances that the BA implemented the corrective actions noted.