COVID-19 testing center Exceltox Laboratories shipped the protected health information of 4,571 patients through UPS, but it never reached its final destination, according to a May 7 data breach notification letter.
Three things to know:
- On Feb. 15, the Irvine, Calif.-based lab sent a package of documents through UPS to a vendor for document scanning. The lab thought the package was delivered successfully, but later learned the package never arrived.
- UPS said it attempted to deliver the package to the vendor, but when the office was closed, it returned the package to UPS' facility for redelivery. However, the package was misplaced and could not be found, the letter said.
- The package contained information relating to 4,571 patients' COVID-19 test results, which were completed at the lab. The exposed PHI includes names, Social Security numbers, birthdates and insurance details.