Fidelis Care New York

The covered entity (CE), Fidelis Care New York, reported that a workforce member emailed documents containing the protected health information (PHI) of 1,680 individuals to the wrong recipient. The PHI involved included names, dates of birth, member identification numbers, medications and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative safeguards and sanctioned the responsible workforce member.