Neurovative Diagnostics

The covered entity (CE), Neurovative Diagnostics, reported that an employee emailed the protected health information (PHI) of 1,599 individuals to an unauthorized individual. The PHI involved included names, dates of birth, diagnoses, and other treatment information. The CE notified HHS and affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were retrained on the requirement to protect and secure PHI.