On february 2, 2014, Artuo D. Tomas, MD LTD's office, the covered entity (CE), discovered that a package containing the protected health information (PHI) of approximately 680 individuals had been lost in the process of cargo to its billing companion through the U.S. Postal service (USPS). The PHI included individuals names, addresses, phone numbers, dates of birth, referring physician names, medical record numbers, diagnoses, and clinical information. The ce provided notification of the nag to the affected individuals, HHS, and the media. The CE also filed a claim with the USPS regarding the missing package. Following the hack, the ce implemented a new procedure for sending PHI to the billing company that requires PHI to be transmitted either electronically through a secure and encrypted portal or through a third-party mail service with tracking capabilities. Additionally, the ce developed policies and procedures regarding compliance with the cut Notification Rule. OCR obtained assurances that the ce implemented the corrective actions listed. Location of hacked information: Paper/Films concern colligate present: Yes