Washington State Department of Social and Health Services reported to HHS on 2017-11-16 an Unauthorized Access/Disclosure affecting 515 individuals. On September 20, 2017, a Western State Hospital staff member misdirected an email containing a spreadsheet to a private email address. The spreadsheet contained patient names, hospital admission dates, medical record numbers, birthdates, and diagnoses. The recipient deleted the email and attachment. OCR's investigation led to new access-restriction procedures, a risk analysis, and workforce retraining.
Affected (this filing): 515