WestCoast Children's Clinic experienced a data breach on November 20, 2012, when a referral document containing PHI, SSNs, and PII was unintentionally emailed to an unauthorized county social worker. The clinic discovered the error on November 27, 2012, and ensured the recipient permanently deleted the data. The clinic reported the incident to the California Attorney General and HHS, conducted a self-audit, changed referral practices, and retrained staff.