Virginia Department of Behavioral Health and Developmental Services

The Virginia Department of Behavioral Health and Developmental Services, the covered entity (CE), reported that an employee inadvertently emailed the electronic protected health information (ePHI) of 657 individuals to the wrong recipient. The ePHI involved included names, member identification numbers, and clinical information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE revised its policies and procedures to better protect its confidential data.