Ledger Dentistry

The covered entity (CE), Ledger Dentistry, reported that an employee sent an email to 538 individuals; the email addresses were visible to all. The electronic protected health information (ePHI) involved included names and email addresses. The CE notified HHS affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative safeguards and retrained its staff on the importance of safeguarding ePHI. OCR obtained assurances that the CE implemented the corrective actions noted.