Between January 1 and April 18, 2015, an employed physician at Central Brooklyn Medical Group, PC (Brooklyn, NY) impermissibly disclosed PHI of ~500 patients to former medical assistants via fax on multiple occasions. In one instance, a transposed fax number sent the PHI of 88 patients to an unrelated third party. PHI involved: names, ages, sex, appointment dates/times/reasons, physician names, and medical conditions. The CE notified 4,223 individuals, sanctioned the physician, confirmed PHI destruction, retrained staff, and reported the physician to NY's Office for Professional Medical Conduct. OCR obtained corrective-action assurances.
Affected (this filing): 4,223