HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 7, 2020.
- Organization as reported
- Clinical & Forensic Consultation, LLC d/b/a Thriveworks Bristol, Johnson City, and Knoxville, TN
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Oct. 7, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12603, row:3742)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Clinical & Forensic Consultation, LLC, dba Thriveworks Bristol, Johnson City, and Knoxville, reported that an employee impermissibly disclosed the email addresses of 1,360 individuals. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned the staff member responsible for the breach and retrained all staff members on the proper procedures for safeguarding ePHI. OCR provided the CE with technical assistance regarding the Breach Notification Rule and obtained assurances that the CE implemented the corrective actions noted.