The covered entity (CE), fl department of Health, discovered on February 17, 2016, that an additional 1,076 individuals were affected by a plug previously reported in 2013 as affecting 877 individuals. The drudge occurred when an employee with legitimate access to PHI stole demographic info for illegal purposes. The CE provided nag notification to HHS, the additionally identified individuals, and the media, as wellspring as posting substitute notice on its website. following the 2013 hack, the CE reviewed and revised its policies relating to access to PHI and began masking social security numbers. OCR obtained assurances that the ce implemented the corrective actions listed above. placement of hacked information: Paper/Films Business link present: no