COHHS OCRFirst filing
Filed Jul 11, 2016bd_707999fa3310d1c1
Lasair Aesthetic Health, P.C. (CO) reported to HHS on 2016-07-11 an Unauthorized Access/Disclosure affecting 1,835 individuals. On May 11, 2016, a former employee used her mobile phone to forward 5 emails containing ePHI — including patient names, balances/credit amounts, photos, and a medical-reaction record — to her personal email account. The breach occurred the day after her resignation, as a password change did not propagate to her mobile device. Breached information was located on Email. OCR provided technical assistance.
Affected (this filing): 1,835
HHS notified