Texas Health Physicians Group

Texas Health Physicians Group, the covered entity (CE), reported that an unauthorized third party gained access to some of its e-mail accounts, affecting 3,808 individuals. The types of protected health information (PHI) involved in the breach included demographic and clinical information. Following the breach, the CE notified HHS, the affected individuals and the media. The CE also implemented technical safeguards to prevent a similar event from occurring in the future. OCR obtained assurances that the CE implemented the corrective actions noted above.