The covered entity (CE), Buckeye Health Plan, reported that a staff member emailed the protected health information (PHI) of 686 individuals to an unauthorized individual. The PHI involved included names and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE requested the information be deleted by the recipient.
