HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Nov. 6, 2020.
- Organization as reported
- Physicians Apothecary, AL
- Entity type as reported
- Healthcare Provider
- Category as reported
Improper Disposal
- Location of information as reported
- Paper/Films
- Submission date
- Nov. 6, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12523, row:3662)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Physicians Apothecary, reported that its business associate (BA) improperly disposed of the protected health information of 2,000 individuals. The PHI involved included names, addresses, telephone numbers, dates of birth, drivers’ license and Social Security numbers, health insurance information, and medications prescribed. The CE notified HHS and affected individuals. The BA provided media notice. In its mitigation efforts, the CE terminated its relationship with the BA and implemented additional administrative policies to better protect its PHI. OCR provided technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted.