Health Data Breach Tracker/MD

Healthcare Provider · Archived

Cardiology Associates

907 individuals · submitted August 10, 2016

About this report

A Cardiology Associates’ employee mailed patients’ protected health information (PHI) to her personal email address without a legitimate business purpose. The breach included the PHI of 907 individuals and included names, dates of birth, and social security numbers. Following the breach, the covered entity (CE) sanctioned the employee, which included termination in this case, and notified the Federal Bureau of Investigation. OCR reviewed the CE's risk assessment to ensure compliance with the Security Rule.

Summary as published by the HHS Office for Civil Rights.

Organization
Cardiology Associates
State
MD
Entity type
Healthcare Provider
Individuals affected
907
Submission date
August 10, 2016
Breach type
Unauthorized Access/Disclosure
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in MD

More Unauthorized Access/Disclosure reports