Kansas Department for Aging and Disability Services (KS) reported to HHS OCR on 2018-04-17 an Unauthorized Access/Disclosure affecting approximately 11,000 individuals. An employee sent ePHI — including names, addresses, dates of birth, Social Security numbers, and health insurance information — to wrong recipients from a Desktop Computer. The CE sanctioned the responsible employee, retrained staff on HIPAA rules, and OCR obtained assurances of corrective action implementation.
Affected (this filing): 11,000