New England Baptist Health

New England Baptist Health (MA) reported to HHS OCR on 2018-06-08 an Unauthorized Access/Disclosure affecting 7,582 individuals. The covered entity impermissibly disclosed a retired physician's patient list — containing patient names and addresses — to the physician and to an outside healthcare provider where the physician referred his patients. Breached information was located in Email. No business associate was involved. Following the breach, all copies of the list were destroyed, sanctions were applied, and the workforce was retrained. OCR reviewed policies and procedures and obtained corrective-action assurances.