Summit Community Care Clinic, Inc.

Summit Community Care Clinic, Inc. (CO) reported to HHS on 2013-08-27 an unauthorized disclosure affecting 921 individuals. An employee sent a group email to patients without using blind carbon copy (BCC), exposing patients' email addresses — the only PHI involved. The CE had existing email security policies; in response, staff were retrained and the responsible employee was individually counseled. OCR provided technical assistance and obtained assurances of corrective action. Breached information located on a Desktop Computer.

Affected (this filing): 921