MOHHS OCRFirst filing
Filed Feb 26, 2016bd_50334702bece43f7
BJC HealthCare ACO, LLC (MO) reported to HHS on 2016-02-26 an Unauthorized Access/Disclosure affecting 2,393 individuals. On December 22, 2015, an employee sent an unencrypted email to a third party in violation of CE policies. PHI involved included patients' names, birthdates, Medicare health insurance numbers, and genders. Breached information was located in Email. CE notified HHS, affected individuals, and media; contacted the email recipient; tested physician servers for TLS; and provided mandatory workforce and targeted employee training. OCR confirmed corrective actions were implemented.
Affected (this filing): 2,393
HHS notified