MASSACHUSETTSHHS OCRFirst filing
Filed Dec 14, 2018bd_abe0dd7328242a90
Massachusetts General Hospital reported to HHS on 2018-12-14 an Unauthorized Access/Disclosure affecting 588 individuals. Breached information located on Paper/Films. A business associate erroneously sent retirement-notification letters to 580 patients with the wrong patient names due to a mail merge error, exposing PHI (patient names and treating physician identity). The CE notified affected individuals, retrained staff, terminated the BA relationship, and internalized mailings. OCR obtained corrective-action assurances.
Affected (this filing): 588
HHS notified