Sound Community Services
Disclosed May 26, 20179 years ago1,278 affectedConfirmed
On January 13, 2017, an unknown individual accessed the covered entity's (CE) CEO’s email account and sent emails to its employees. The CEO’s email account contained a file with the electronic protected health information (ePHI) – names and client numbers – of approximately 1,273 individuals. The CE immediately took steps to implement additional technical safeguards for its email system and engaged a third-party service to assist in its ongoing privacy and security activities. The CE provided breach notification to HHS, and OCR provided technical assistance regarding the breach notification requirements pertaining to to the media and affected individuals.
What is known
| People affected | 1,278 (as reported to HHS) |
|---|---|
| Disclosed | May 26, 2017 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Sound Community Services (Healthcare Provider, CT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 26, 2017 | 1,278 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.