Rockdale Blackhawk, LLC d/b/a Little River Healthcare

Little River Healthcare, which was a covered entity (CE), discovered that on July 12, 2018, two of its providers shared their login credentials with unauthorized third- party individuals (transcriptionists) and provided access to patients’ protected health information (PHI) through the CE's electronic medical record system. The PHI potentially affected included the names, dates of birth, social security numbers, addresses, and treatment information of approximately 1,494 individuals. The CE reported that it filed for Chapter 11 bankruptcy on July 24, 2018, and on December 7, 2018, the Chapter 11 bankruptcy case was converted to a Chapter 7 bankruptcy case. Additionally, the CE reported that it began an internal corporate wind down of its business affairs. Further, on December 7, 2018, the CE ceased operations as an active business and all facilities were shut down. OCR obtained documented assurances related to the bankruptcy and corporate wind down.