Cabinet for Health and Family Services, Department for Community Based Services (KY) reported to HHS on 2012-09-19 an Unauthorized Access/Disclosure affecting 2,500 individuals. Breached information was located in Email. An employee's email account generated spam that may have caused an unintentional release of PHI. OCR investigated; the CE notified affected individuals and media, required staff to sign PHI safeguarding agreements, and created a security training video. HIPAA policies were found compliant.
Affected (this filing): 2,500