MSHHS OCRFirst filing
Filed Mar 26, 2018bd_e509afb625f9facf
Mississippi State Department of Health reported to HHS on 2018-03-26 an Unauthorized Access/Disclosure affecting 30,799 individuals. On January 25, 2018, an employee accidentally emailed an unencrypted spreadsheet containing PHI (names, ID numbers, dates of birth, SSNs, and STD lab results) to external contractors on a joint project. Contractors confirmed they did not retain or share the PHI. The CE sanctioned responsible employees, provided onsite HIPAA training, and issued timely notifications to HHS, individuals, and media. OCR obtained assurances of corrective actions.
Affected (this filing): 30,799
HHS notified