You must log in or # to comment.
Is it really a breach or a major fsckup that needs to be legally dealt with? Sounds more like an ‘oops! Shared everything’ that ‘evil hackers steal tons of PHI’
It’s really the latter, but the laws requiring notification are structured in a way that it’s considered a breach because the end result is the same for the individuals affected.