Queen's Health Systems Affiliated Covered Entity

The covered entity (CE), The Queen’s Health Systems Affiliated Covered Entity, reported that a workforce member inadvertently emailed the electronic protected health information (ePHI) of 2,852 individuals to the wrong recipient. The ePHI involved included names, financial information, health insurance information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. Following the breach, the CE sanctioned the responsible workforce member, implemented new technical safeguards, and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.