MOHHS OCRFirst filing
Filed Jan 7, 2015bd_6184db12dfd11a40
On November 18, 2014, a departing employee of Saint Louis County Department of Health (MO) emailed a reconciliation spreadsheet containing PHI of ~4,000 patients to her personal email account upon resignation. Exposed data included names, Social Security numbers, and dates of service. The CE filed a police report, terminated the employee's access, notified HHS/affected individuals/media, and retrained staff on HIPAA. OCR obtained assurances of corrective action. Breach submitted to HHS on 2015-01-07; located on Email and Network Server.
Affected (this filing): 4,000
HHS notified