MNHHS OCRFirst filing
Filed Sep 16, 2021bd_9a3c6e2655d3cabb
Mankato Clinic (MN) reported to HHS on 2021-09-16 an Unauthorized Access/Disclosure affecting 535 individuals. An employee accidentally sent an email containing ePHI — including names, addresses, dates of birth, financial information, and diagnoses/conditions — to the wrong recipient. The CE notified HHS, affected individuals, and the media, and provided substitute notice. Mitigation included sanctioning the responsible employee and retraining staff on ePHI safeguarding. Breached information located on Email.
Affected (this filing): 535
HHS notified