Rock Valley Physical Therapy Center

The covered entity (CE), Rock Valley Physical Therapy Center, reported that an employee sent an email to 2,421 individuals that exposed names and email addresses. The CE notified HHS, the affected individuals, the media, and provided substitute notice on its website. In its mitigation efforts, the CE sanctioned and retrained the employee responsible and implemented additional administrative safeguards to better protect sensitive data.