Kentucky Counseling Center reported to HHS an instance of improper access or disclosure involving an EMR that exposed 16,440 patients information .
KCC makes it plain that they believe a former employee stole a list of patient data.
Although the organization doesn't think the person who took the list intended to harm the people on it, they still informed patients of these facts out of an abundance of caution.
Other than some people's previous and/or upcoming appointment dates and, occasionally, the names of KCC doctors involved in their care, the list contained no clinical details on the patients.
They investigated the incident and took further preventive steps.
"id": "KEN45516223",
"linkid": "kentucky-counseling-center",
"type": "Data Leak",
"date": "02/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"