University Hospitals Rainbow Babies & Children's Hospital

The covered entity (CE), University Hospitals Rainbow Babies & Children’s Hospital, reported that an employee emailed protected health information to the wrong recipients. This breach affected 836 individuals. The CE notified HHS, affected individuals, and the media. As a result of this breach, the CE implemented additional administrative and technical safeguards and retrained employees on patient privacy and the proper procedures for communicating with individuals electronically. OCR obtained assurances that the CE implemented the corrective actions noted.