NeoGenomics Laboratories

NeoGenomics Laboratories, Inc., the covered entity (CE), reported that an employee emailed the protected health information (PHI) of 912 individuals to the wrong recipient. The PHI involved included names, dates of birth, and financial data. The CE notified HHS and affected individuals. As part of its mitigation efforts, the CE sanctioned the responsible employee and implemented additional administrative guidelines and retrained its staff. The CE also offered complimentary credit monitoring services to affected individuals. OCR obtained assurances that the CE implemented the corrective actions noted.