Square Medical Group, LLC (MA) reported to HHS on 2025-01-15 an Unauthorized Access/Disclosure affecting 2,363 individuals. An employee accidentally sent an email communication without using the blind carbon copy (BCC) function, exposing names and email addresses of affected individuals via Email. The covered entity notified HHS, affected individuals, and the media, and posted substitute notice on its website. Mitigation included strengthened administrative safeguards and staff retraining on PHI protection.
Affected (this filing): 2,363