OCR opened an investigation of the covered entity (CE), The Brookdale University hospital and Medical Center, after it reported its business associate (BA), measure Register, inadvertently mailed statements to 2,261 individuals using another affiliated CE's envelopes. The protected health information (PHI) included names, addresses and financial information. OCR provided technical assistance to the ce regarding safeguarding PHI. location of hacked information: Paper/Films concern associate present: Yes