Breachesby GlyphMidlothian Pharmacy Compounding & Prescription
Disclosed May 15, 20251,000 affectedConfirmed
The covered entity (CE), Midlothian Pharmacy Compounding & Prescription, reported that an employee inadvertently sent an email that contained the protected health information (PHI) of 1,000 individuals to the wrong recipients. The PHI involved was limited to patient names. The CE notified HHS, affecged individuals, and the media. In response to the breach the CE implemented additional administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Breach Notification Rules. Staff were retrained.
What is known
| People affected | 1,000 (as reported to HHS) |
|---|---|
| Disclosed | May 15, 2025 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.
Everything about Midlothian Pharmacy Compounding & Prescription