Braun Internal Medicine, P.C.

On May 17, 2017, Braun Internal Medicine, P.C. (GA) sent a bulk email to 680 patients regarding a business transition without using the blind copy (BCC) feature, exposing all recipients' email addresses to one another. The exposed PHI was limited to email addresses; no other PHI was disclosed. The covered entity sanctioned the responsible employee, implemented new email PHI safeguarding policies, trained all staff, and issued breach notifications to HHS, affected individuals, and the media. OCR obtained assurances of corrective action. Breach submitted to HHS on 2017-07-14. Breached information located in Email.

Affected (this filing): 680