Heartland Counseling Services

Heartland Counseling Services, the covered entity (CE), reported that an employee emailed patients without using the blind-copy function exposing the email addresses of 723 individuals. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the responsible employee and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.