CALIFORNIAHHS OCRFirst filinglinked via same-victim cross-source · 100%
Filed May 31, 2018bd_172bbf61ccaa8a49
During a mass emailing in April 2018, Dignity Health (CA) used an email list incorrectly formatted by its business associate, causing 55,947 individuals to receive an email intended for another individual. Exposed PHI included first name, last name, and physician name. The CE notified HHS, affected individuals, and the media. OCR obtained assurances of voluntary corrective actions: elimination of personalized greetings in mass communications, updated email policies, and a designated approver for all mass communication projects. Breach submitted to HHS on 2018-05-31. Breached information located on Email.
Affected (this filing): 55,947
HHS notified