Banis Plastic Surgery
Disclosed Apr 4, 20233 years ago4,498 affectedConfirmed
The covered entity (CE), Banis Plastic Surgery, reported that an employee emailed the protected health information (PHI) of 4,498 individuals to the wrong recipients. The PHI involved included names and addresses. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI. OCR provided technical assistance regarding the HIPAA Breach Notification Rule.
What is known
| People affected | 4,498 (as reported to HHS) |
|---|---|
| Disclosed | Apr 4, 2023 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Banis Plastic Surgery (Healthcare Provider, KY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 4, 2023 | 4,498 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.