SSM Dean Medical Group (operating as SSM Health) reported to HHS OCR on 2017-01-10 an Unauthorized Access/Disclosure affecting approximately 4,800 individuals. The CE inadvertently sent emails to wrong recipient patients due to an improperly sorted data file. PHI involved included full names only. OCR found the initial breach notification was non-compliant (electronic notice sent without prior individual agreement). As corrective action, the CE sent written first-class mail notices and adopted a procedural checklist for all mass email communications. Breached information located on Email.
Affected (this filing): 4,800