East Paris Internal Medicine Associates
Disclosed Nov 22, 20241 year ago5,239 affectedConfirmed
East Paris Internal Medicine Associates, the covered entity (CE), reported that an employee emailed the protected health information (PHI) of 5,239 individuals to her personal email account. The PHI involved names, dates of birth, medical record numbers, claims information, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE implemented new technical safeguards, sanctioned the workforce members involved, and retrained staff on the obligation to protect and secure PHI.
What is known
| People affected | 5,239 (as reported to HHS) |
|---|---|
| Disclosed | Nov 22, 2024 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): East Paris Internal Medicine Associates (Healthcare Provider, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 22, 2024 | 5,239 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.