IEC Group

IEC Group dba AmeriBen, the covered entity (CE), reported that an employee inadvertently sent an email to patients that contained the protected health information (PHI) of 74,884 individuals. The PHI involved included names, financial information, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned and retrained the employee responsible for the breach and implemented new administrative safeguards.