OKHHS OCRFirst filing
Filed Aug 22, 2014bd_1d8c89e77cfa627a
Oklahoma City Indian Clinic (OK) reported to HHS on 2014-08-22 an Unauthorized Access/Disclosure affecting 6,000 individuals. A staff member erroneously sent an email to 412 recipients with an attachment containing ePHI (patients' names, chart numbers, and email addresses) of 6,044 individuals. The CE attempted a recall, re-trained staff on its encryption policy, and developed a new policy restricting electronic transmission of patient information and requiring password protection for ePHI files. OCR obtained assurances that all corrective actions were completed.
Affected (this filing): 6,000
HHS notified