Elizabeth Hospice
Disclosed Dec 14, 202235,496 affectedConfirmed
The Elizabeth Hospice, the covered entity (CE), reported that a workforce member emailed the protected health information (PHI) of 35,496 individuals to a personal email account. The PHI involved included names and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards and retrained its employees on patient privacy. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 35,496 (as reported to HHS) |
|---|---|
| Disclosed | Dec 14, 2022 |
| Discovered | Oct 21, 2022 |
| Happened | Oct 21, 2022 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
unknown to insiderby backfillSource
organization to hhsby backfillSource
3 to 35496by backfillSource
empty to The Elizabeth Hospice, the covered entity (CE), reported that a workforce member emailed the protected health information (PHI) of 35,496 individuals to a personal email account. The PHI involved included names and treatment information. Thby backfillSource
[] to ["names","health"]by backfillSource
empty to organizationby backfillSource
empty to 3by backfillSource
empty to 2022-10-21by backfillSource
empty to 2022-10-21by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.