I am a solo practitioner in private practice as a psychotherapist. Work was slow so I agreed to subcontract for a local mental health provider who is funded by Medicaid. I was just informed by a representative of this agency that a client filed a complaint against me under HIPAA. The client alleges that I left files with other patients names laying out that could be seen. I have recollections of an incident where I was working on some files when a client entered my office but promptly pick them up and put them away concealing them behind my chair to work on later. I did not think anything of it at the time but subsequently remember getting up to make the client a copy of a document from s/he’s file and observed the client getting up out of their seat and looking over into the area where I had concealed the files I had been working on. It's possible that there was an incidental observance of someone's name when the files were sitting in front of my chair but highly unlikely they could have been read. If the client was deliberately attempting to look at the pile of files I had concealed only one name would've been visible. But that would've been deliberate by the complaining client seeking to see information not pertaining to them. . Need I be concerned about this complaint and ongoing investigation by the agency I subcontract with?

Optional Information:
Country relating to Question: United States
State (if USA): Oregon

Already Tried:
Just reading on the internet