The covered entity (CE), CDC/NIOSH/World switch center health Program, discovered that mail sent via the U.S. Postal service (USPS) containing protected health information (PHI) was damaged en route to the recipient and some of the pages were missing upon receipt. The missing documents contained the names, provider names and numbers, medical codes, dates of service, and the treatment information for 597 individuals. The CE provided hack notification to HHS, affected individuals, and reserve note on its website. The CE also set up a toll free phone number to reply questions. notification to a prominent media release was not required as the hack did not affect 500 or more individuals residing in the same region. in reception to the hack, the CE requested that the USPS lead a mail recovery look to place the lost and/or unidentifiable pages, but the missing documents were not found. OCR obtained assurances that the ce implemented the corrective actions listed above. placement of hacked information: Paper/Films business associate present: no