Refresh Mental Health

The covered entity (CE), Refresh Mental Health, dba Springfield Psychological, reported that an employee sent a marketing email to 948 individuals without using the blind carbon copy function. The electronic protected health information (ePHI) involved included names and email addresses. In its mitigation efforts, the CE sanctioned the responsible employee and strengthened its administrative safeguards to better protect its ePHI.