Chautauqua County

ArchivedSubmitted 04/16/2021

State: NY
Covered entity type: Healthcare Provider
Individuals affected: 537
Business associate present: No
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Email
First seen by InfoSec Signals: 9/23/2026
Last seen in OCR export: 9/23/2026

OCR description

The covered entity (CE), Chautauqua County, reported that an employee sent out an email containing the protected health information (PHI) of 537 individuals without using the blind carbon copy function. The PHI involved included names and email addresses. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned and retrained the employee.

Change history

9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.