County of Santa Barbara, Department of Behavioral Wellness

The covered entity (CE), County of Santa Barbara, Department of Behavioral Wellness, reported that its workforce member impermissibly accessed the protected health information (PHI) of 601 individuals. The PHI involved included names, addresses, telephone numbers, dates of birth, Social Security numbers, medical record numbers, diagnoses, medications, and health insurance and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE sanctioned the workforce member, implemented additional technical safeguards, revised its policies and procedures, and retrained all workforce members.