IOWAHHS OCRFirst filing
Filed Nov 30, 2018bd_7495ea77e94c73a6
Thielen Student Health Center (Iowa) reported to HHS on 2018-11-30 an Unauthorized Access/Disclosure affecting 599 individuals. On November 5, 2018, a human coding error caused patient survey invitation emails to be sent to the wrong patients. Of 599 affected, 594 emails implicated FERPA rather than HIPAA; one ePHI email was successfully recalled, leaving 4 individuals with HIPAA-covered ePHI breached (names, appointment dates, physician names). No business associate was involved. Breached information was located in email.
Affected (this filing): 599
HHS notified