Bellevue Hospital Center

The covered entity (CE), Bellevue Hospital Center, reported that an employee sent an email containing the electronic protected health information (ePHI) of 3,334 individuals to an authorized party. The ePHI involved included names, email addresses, phone numbers, health insurance information, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrate and technical safeguards and sanctioned the responsible employee. All workforce members were retrained on the proper methods of safeguarding ePHI.