NEW YORKHHS OCRFirst filing
Filed May 8, 2019bd_9e8c9ecb8c8bf8f2
Independent Health Association, Inc. (NY Health Plan) reported to HHS OCR on 2019-05-08 an Unauthorized Access/Disclosure affecting 7,605 individuals. An employee accidentally emailed documents containing ePHI — including names, diagnoses, claims data, clinical information, treatment information, and financial information — to the wrong recipient via email. The CE notified HHS, affected individuals, and the media, sanctioned the employee, retrained staff, and implemented new administrative safeguards. OCR obtained assurances that corrective actions were implemented.
Affected (this filing): 7,605
HHS notified