University Muslim Medical Association

University Muslim Medical Association (UMMA) reported that a former employee sent a secured file containing patient names and dates of birth to their personal email address. The incident was discovered on July 1, 2020, with the breach occurring on June 29, 2020. UMMA obtained a signed statement from the former employee confirming the file was destroyed and implemented policy updates to prevent recurrence. No unauthorized access or use of the data was indicated.

University Muslim Medical Association (CA) reported to HHS on 2020-09-29 an Unauthorized Access/Disclosure affecting 563 individuals. A former employee emailed documents containing ePHI — including names, dates of birth, and medical diagnoses — to her personal email account. The CE notified HHS, affected individuals, and the media. Corrective actions included strengthening administrative and technical safeguards; OCR obtained assurances of implementation. Breached information located on Email.

Affected (this filing): 563