DCHHS OCRFirst filing
Filed Jul 28, 2017bd_0888080a87b2650d
Braun Dermatology & Skin Cancer Center (Washington, DC) reported to HHS OCR on 2017-07-28 an Unauthorized Access/Disclosure affecting 1,200 individuals. The covered entity sent a mass email to patients that failed to conceal recipients' email addresses, exposing patient email addresses as PHI. The Privacy Officer attempted a message recall, conducted a breach risk assessment (low risk determined), and implemented a new policy eliminating mass emails in favor of a secure individual patient reminder system. OCR obtained assurances of corrective action. Breached information was located in Email.
Affected (this filing): 1,200
HHS notified