Ascension Borgess Hospital (Michigan) reported to HHS on 2019-11-14 an Unauthorized Access/Disclosure affecting 996 individuals. An employee sent a mass email to 996 individuals without using the blind copy (BCC) function, exposing recipients' email addresses. PHI was limited to email addresses only. Breached information located in Email. The CE notified HHS, affected individuals, and the media, retrained the responsible employee, and delivered HIPAA Privacy Rule training to all staff. OCR confirmed corrective actions were implemented.
Affected (this filing): 996