A patient scheduler of the covered entity (CE), Advanced Radiology Consultants, emailed 754 patients protected health information (PHI) from her work email account to a personal email account in enjoin to keep a separate record for any performance issues. An additional 100 patients were affected by the nag because the scheduler had access to PHI about them in emails and a USB gimmick (854 total individuals affected). The PHI involved in the cut included patients names, dates of birth, phone numbers, account balances, indemnity information, treatment and testing information, designation dates and times, appointment notes, and referring physicians information. following discovery of the hack, the ce sanctioned the workforce member and requested that she delete the PHI she sent to her personal email account. The CE also provided cut notification to HHS, affected individuals, and the media, and provided individuals with credit monitoring services at no cost. OCR obtained assurances that the ce implemented the corrective actions listed above. Location of hacked information: Electronic Medical record Business associate present: no