FLHHS OCRFirst filing
Filed Apr 18, 2016bd_0a8c118bae9cfd64
Florida Hospital Medical Group (FL) reported to HHS on 2016-04-18 an Unauthorized Access/Disclosure affecting 1,906 individuals. The covered entity's transcription vendor, Data Tray, transmitted dictated health information back to providers via an unencrypted email account. PHI exposed included names, diagnoses, conditions, and medications. No BAA was in place with Data Tray at the time. The CE terminated the relationship, engaged a new BAA-compliant vendor, implemented additional administrative safeguards, and retrained staff. Breached information located on Email.
Affected (this filing): 1,906
HHS notified