HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of April 1, 2021.
- Organization as reported
- MedData Incorporated, TX
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- April 1, 2021
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12250, row:3389)
- Archived copy
- Held in the private archive (provenance)
MedData Incorporated, the business associate (BA), reported that an employee inadvertently published the protected health information (PHI) of 135,908 individuals via the Internet. The PHI involved included names, addresses, birthdates, Social Security numbers, diagnoses/conditions, lab results, medications prescribed, and claims and other treatment information. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the BA implemented additional administrative and technical safeguards to better protect PHI.