VERMONTHHS OCRFirst filing
Filed Jun 16, 2017bd_9eddf9fc8cae67af
Rutland Regional Medical Center reported to HHS on 2017-06-16 a Unauthorized Access/Disclosure affecting 665 individuals. Breached information located on Email. The covered entity sent patient surveys via email with recipient addresses in the 'To' line, exposing patient names and email addresses to all other recipients. The CE provided breach notification to HHS, affected individuals, and the media, and set up an assistance help line. As a result of OCR's investigation, the CE revised its policies regarding using and disclosing protected health information and sending patient emails, and re-trained its staff on its HIPAA policies.
Affected (this filing): 665
HHS notified