Tri-State Specialists, LLP (Iowa) reported to HHS OCR on 2020-10-29 an Unauthorized Access/Disclosure affecting 17,050 individuals. An employee sent an email containing ePHI — specifically names and email addresses — to wrong recipients. The CE notified HHS, affected individuals, and the media. The responsible employee was sanctioned and retrained alongside other employees. The CE also implemented additional administrative safeguards. OCR obtained assurances that corrective actions were implemented.
Affected (this filing): 17,050