Houston Methodist Hospital (TX) reported to HHS OCR on 2017-09-25 an Unauthorized Access/Disclosure affecting 1,359 individuals. A workforce member sent an email to patients without using the BCC field, exposing recipients' email addresses to one another. Breached information was located in Email. The CE notified HHS, affected individuals, and the media, updated technical safeguards, and retrained staff. OCR obtained assurances of corrective action implementation.
Affected (this filing): 1,359