HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 20, 2017.
- Organization as reported
- EMERGENCY COVERAGE CORPORATION, TN
- Entity type as reported
- Healthcare Provider
- Category as reported
Loss
- Location of information as reported
- Paper/Films
- Submission date
- Oct. 20, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14025, row:5164)
- Archived copy
- Held in the private archive (provenance)
On September 5, 2017, Emergency Coverage Corporation, the covered entity (CE), discovered that two boxes of remittance advice forms fell off the back of a UPS truck. The types of protected health information (PHI) included on the forms were patients’ names, addresses, dates of birth, health insurance policy numbers, diagnostic codes, a description of the services rendered, and full or partial social security numbers. The breach affected 730 individuals. The CE provided breach notification to HHS and the affected individuals. Media notification was not required as less than 500 affected individuals resided in a single geographic region. In response to the breach, the CE reviewed its policies and procedures, performed a risk assessment, and offered identity theft insurance coverage to the affected individuals. OCR obtained assurances that the CE implemented the corrective actions listed above.