The Miriam Hospital (Providence, RI) reported to HHS OCR on 2021-05-17 an Unauthorized Access/Disclosure breach affecting 2,999 individuals. An employee inadvertently sent an email containing ePHI — including names and email addresses — without using the blind carbon copy (BCC) function, exposing recipients to one another's identities. Breached information was located in Email. The hospital notified HHS, affected individuals, and the media, set up a dedicated phone line, revised its policies and procedures, and retrained staff.
Affected (this filing): 2,999