A multi-site dental organization was unprepared and facing an OCR (Office for Civil Rights) audit with possible fines for accidentally exposing over 4,000 ePHI records to public search engines. The breach was caused by an improperly configured computer server that was owned by the dental company and had not been updated for several months. The server was not properly connected to the private and secure network.
Through All Covered’s Managed Compliance Services, we were able to assist the dental organization with a thorough HIPAA risk assessment to analysis the administrative, physical and technical safeguards that were currently in place. Click here to read the full story!
SOURCE All Covered