NEW YORKHHS OCRFirst filing
Filed Mar 17, 2016bd_f98d219b1f51318c
Hospital for Special Surgery (NY) reported to HHS OCR on 2016-03-17 an Unauthorized Access/Disclosure affecting 647 individuals. An employee sent an email to research study participants without using BCC, inadvertently revealing each participant's email address and general research study information to other recipients. The ePHI was transmitted via email. No business associate was involved. Following the breach, the employee received one-on-one HIPAA training, and the CE committed to revising its email policy and increasing HIPAA training frequency to at least three times per year.
Affected (this filing): 647
HHS notified