United Community & Family Services (CT) reported to HHS on 2016-04-12 an Unauthorized Access/Disclosure affecting approximately 1,095 individuals (1,000 per HHS portal count). The CE mistakenly sent a mass email advertising dental services to current and former patients with all recipients' email addresses visible to each other. PHI involved included names embedded in email addresses and the implied suggestion that recipients had received dental services. Breached information was located in Email. No business associate was involved. OCR investigated; the CE revised policies, retrained staff, and issued ongoing HIPAA reminders.
Affected (this filing): 1,000