Professional Dental Alliance of Florida, PLLC, dba All Smiles Dentistry, the covered entity (CE), reported than an employee impermissibly accessed the electronic protected health information (ePHI) of 1,505 individuals. The employee was subsequently arrested for identity theft and credit fraud. The ePHI involved included names, addresses, email addresses, phone numbers, Social Security numbers, health insurance information, drivers’ license information, financial information, and clinical information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned the responsible employee, implemented additional administrative and technical safeguards and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.
