MASSACHUSETTSHHS OCRFirst filing
Filed Jul 8, 2015bd_7fb338e056d38a26
Massachusetts General Hospital reported to HHS OCR on 2015-07-08 an Unauthorized Access/Disclosure affecting 648 individuals. An employee sent an unencrypted email containing PHI (names, dates of birth, medical record numbers, and Social Security numbers) to an incorrect email address. The employee was sanctioned and the CE updated its policy to use a secure storage application in place of email for PHI transmission. OCR obtained assurances of corrective action implementation.
Affected (this filing): 648
HHS notified