Massachusetts’ first registered medical marijuana dispensary just began operating in June. Alternative Therapies Group, based in Salem, Mass. on Aug. 13, sent a group email to some of its patients. Instead of blind copying the patients – or hiding their email addresses in the “BCC” line of the message – each individual’s email address was visible. In a statement issued to the Boston Globe, the dispensary said it regretted the error involving sensitive personal information. Privacy attorneys say the breach does not appear to violate federal HIPAA laws.”]
Source: https://www.cuinfosecurity.com/was-marijuana-mishap-privacy-breach-a-8476