Tri-State Specialists, LLP

The covered entity (CE), Tri-State Specialists, LLP, reported that an employee sent an email containing the electronic protected health information (ePHI) of 17,050 individuals to the wrong recipients. The ePHI involved included names and email addresses. The CE notified HHS, affected individuals, and the media. Following the breach, the responsible employee was sanctioned and retrained with other employees to prevent future incidents of this nature. In addition, the CE implemented additional administrative safeguards to better protect its ePHI. OCR obtained assurances that the CE implemented the corrective actions noted.