HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 29, 2019.
- Organization as reported
- Lanier Family & Cosmetic Dentistry, P.C., GA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Jan. 29, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13554, row:4693)
- Archived copy
- Held in the private archive (provenance)
On October 24, 2018, via a business associate (BA), an employee sent emails to 1,953 patients that erroneously contained a spreadsheet that listed protected health information (PHI) for all recipients of the message. The spreadsheet included names, genders, ages, addresses, telephone numbers, and email addresses. Immediately following the breach, the covered entity (CE) sent an apology email to the affected individuals, sanctioned the responsible employee, trained all employees on its new email policy, and terminated its contract with the BA. OCR provided the CE with extensive technical assistance regarding the definition of a breach, breach notification, policies and procedures, and BA agreements. In response to OCR’s investigation, the CE reviewed, revised, and drafted new policies and procedures and provided breach notification to HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the corrective actions listed above.