OHHHS OCRFirst filing
Filed May 24, 2019bd_d6f313d8797ca8ad
TriHealth Physician Practices (OH) reported to HHS on 2019-05-24 an Unauthorized Access/Disclosure affecting 2,433 individuals. An employee impermissibly disclosed PHI — including names, addresses, dates of birth, ethnicity, diagnoses/conditions, and other treatment information — via email to an unauthorized student mentee. The CE sanctioned the employee, retrained staff, and implemented additional administrative safeguards. OCR obtained assurances that corrective actions were completed. Breached information was located on Email.
Affected (this filing): 2,433
HHS notified