Alternative Therapies Group, based in Salem, Mass., sent a group email to some of its patients on Aug. 13. Instead of blind copying the patients, the email addresses were visible. The dispensary said it regretted the error involving sensitive personal information. Privacy attorneys say the breach does not appear to violate federal HIPAA laws. The Department of Health and Human Service’s Office for Civil Rights oversees HIPAA enforcement. In a statement, the dispensary’s executive director called the incident an “honest error””]
Source: https://www.databreachtoday.com/was-marijuana-mishap-privacy-breach-a-8476