The business associate (BA), Shutterfly, LLC, reported that an employee mailed the protected health information (PHI) of 2,641 individuals to the wrong recipients. The PHI involved included names, addresses, diagnoses, health insurance information, and claims and other treatment information. The BA notified HHS and the affected individuals. In response to the breach, the BA implemented additional technical safeguards, revised its policies and procedures, and retrained its employees.
2026-09-25 · sector: other to health · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · summary: empty to The business associate (BA), Shutterfly, LLC, reported that an employee mailed the protected health information (PHI) of 2,641 individuals to the wrong recipients. The PHI involved included names, addresses, diagnoses, health insurance info · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 52777 · backfill source
2026-09-25 · disclosed: 2022-03-23 to 2021-12-18 · backfill source
2026-09-25 · attack: unknown to ransomware · backfill source
2026-09-25 · discovered: empty to 2021-12-13 · backfill source
2026-09-25 · disclosed: 2022-06-02 to 2022-03-23 · backfill source
