HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 24, 2010.
- Organization as reported
- Aramark Healthcare Support Services, LLC, PA
- Entity type as reported
- Business Associate
- Category as reported
Other
- Location of information as reported
- Submission date
- June 24, 2010
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 16031, row:7170)
- Archived copy
- Held in the private archive (provenance)
A business associate employee sent an email to multiple patients without concealing patient email addresses. The message concerned a dietary program in which the names and email addresses were visible to all recipients. The breach affected 937 individuals. In response to this incident, the covered entity took steps to enforce the requirements of its business associate agreement with Aramark. The business associate counseled the employee responsible for the breach and retrained all employees who may communicate with patients via email on the requirements of the Privacy and Security Rules as well as related policies and procedures. \