HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 14, 2017.
- Organization as reported
- Braun Internal Medicine, P.C., GA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- July 14, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14124, row:5263)
- Archived copy
- Held in the private archive (provenance)
On May 17, 2017, Braun Internal Medicine, P.C., the covered entity (CE), sent emails to 680 patients notifying them about a business transition. The “blind copy” feature was not used in the email and all the recipients could see the email addresses for the other recipients. The exposed protected health information (PHI) was limited to email addresses. The email contained no other PHI. In response to the breach, the CE sanctioned the responsible employee and implemented a new policy with procedures for safeguarding PHI in emails. The CE has trained all employees on the new procedures. The CE provided breach notification to HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the voluntary corrective actions noted above.