ARHHS OCRFirst filing
Filed May 12, 2016bd_fdc4dce7b6af2d36
An employee of Pulaski County Special School District—Employee Benefits Division (AR) emailed health insurance reconciliation data for 2,602 current and former employees to her personal home email account prior to resigning. Exposed data included names, SSNs, disability reports, payroll deductions, and benefits records. The CE notified HHS, affected individuals, media, and local law enforcement. Breached information was located in email. OCR provided technical assistance; the CE committed to additional technical safeguards and updated HIPAA policies.
Affected (this filing): 2,602
HHS notified