Embody Performance & Recovery (MO) reported to HHS on 2024-11-04 an Unauthorized Access/Disclosure affecting 1,100 individuals. An employee emailed the PHI of 1,215 individuals without using the blind carbon copy (BCC) function; exposed information included email addresses. Breached information was located in Email. No business associate was involved. The CE notified HHS, affected individuals, and the media, implemented additional administrative safeguards, performed a new risk analysis, and received OCR technical assistance.
Affected (this filing): 1,100