The covered entity (CE), Texas Health and Human Services, reported that that an employee emailed the protected health information of 3,392 individuals to a personal email account. The PHI involved included names, addresses, Social Security numbers, telephone numbers, diagnoses/conditions, and health insurance information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided free credit monitoring and implemented additional technical safeguards.
