Campbell County Hospital District

The covered entity (CE), Campbell County Hospital District, reported that a workforce member inadvertently sent a document that contained the electronic protected health information (ePHI) of 900 individuals, to the wrong recipient. The ePHI involved included names, account numbers, and health insurance information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned the responsible workforce member and implemented additional administrative, technical, and security safeguards to better protect its PHI. OCR provided the CE technical assistance.