Planned Parenthood of Greater Washington and North Idaho (PPGWNI) reported to HHS on 2016-08-26 an Unauthorized Access/Disclosure affecting 10,700 individuals. Breached information located on Email. Business associate athenahealth, inc. inadvertently sent portal invitation emails to wrong addresses, exposing first and last names of 10,700 individuals. The CE and BA shut down the portal, investigated, implemented safeguards, and reestablished the portal after reconfirming permissions. OCR obtained documented corrective action assurances.
Affected (this filing): 10,700