The covered entity (CE), Healthy Connections, Inc., reported that an employee inadvertently disclosed the email addresses of 3,565 individuals to the wrong recipients. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the responsible employee and retrained all employees on the importance of safeguarding its sensitive data. OCR obtained assurances that the CE implemented the corrective actions noted. OCR obtained assurances that the CE implemented the corrective actions listed.
