George Washington University Medical Faculty Associates

The covered entity (CE), The George Washington University Medical Faculty Associates, reported that an employee sent an email that contained the electronic protected health information (ePHI) of 576 individuals without using the blind carbon copy feature. The ePHI involved included names and email addresses. The CE notified HHS and the affected individuals. In response to the breach, the CE retrained its staff on email security.