Village of Oak Park, Illinois

The Village of Oak Park, Illinois (VOPI), a covered entity (CE), reported than an employee emailed spreadsheets which contained protected health information (PHI) to a personal email account. The breach affected approximately 688 individuals and the PHI involved included names, dates of birth, social security numbers, and health insurance information. Following the breach, the covered entity terminated the employee responsible for the breach incident. VOPI notified all affected individuals and prominent media outlets. It also posted notice on its website. The CE strengthened its capabilities to monitor email communications and incorporated spam and encryption technologies.