Infor-Med Medical Information Systems, Inc., a business associate, reported that it sent an unsecured email containing the electronic protected health information (ePHI) of 3,728 individuals. The ePHI involved included demographic information. The business associate notified HHS, affected individuals, and the media. Following an investigation by the Office for Civil Rights (OCR), the business associate adopted additional technical and security safeguards, retrained its staff, and sanctioned the responsible employee.
Affected (this filing): 3,728