Hal Meadows, M.D.

The cover entity CE), Dr. Hal Meadows (HM) reported a breach that occurred when its electronic patient billing files were unlawfully accessed on a desktop computer in the CE’s office. The breach affected approximately 6,000 individuals who were the CE’s patients. The electronic protected health information (ePHI) involved included full names, addresses, dates of birth, telephone numbers, some social security numbers, claims information, diagnosis/conditions, lab results, medications, treatment codes, and billing information. The CE provided breach notification to HHS, affected individuals, and the media, and also provided substitute notice. Following the breach, the CE also immediately reported the incident to the FBI. As a result of this incident, the CE updated its policies and procedures, and contracted with a company to provide an encrypted cloud-based billing system in order to safeguard ePHI. OCR obtained assurances that the CE implemented the corrective actions above.