United Methodist Homes (NY) reported an unauthorized disclosure of 843 residents' PHI after a workforce member emailed a spreadsheet containing resident names, medical record numbers, and contact details to a personal account. The entity notified HHS, media, and individuals, offered 12 months of credit monitoring, sanctioned the employee, and implemented email filtering and TLS encryption.
Affected (this filing): 843