MIHHS OCRFirst filing
Filed Apr 13, 2017bd_9af876088f062e56
Area Agency of Aging 1-B (MI) reported to HHS on 2017-04-13 an Unauthorized Access/Disclosure affecting 1,741 individuals. A workforce member failed to encrypt emails with spreadsheet attachments sent to intended recipients. The unencrypted emails exposed PHI including names, case numbers, dates of service, and medical procedure codes. The CE (Michigan DHHS/Aging and Adult Services Agency) notified HHS, affected individuals, and the media. Corrective actions included HIPAA training, email encryption enforcement, policy updates, and separation of the responsible staff member. OCR obtained documented assurances of compliance. Breached information located on Email.
Affected (this filing): 1,741
HHS notified