HealthPoint Family Care, Inc., a federally-qualified health center headquartered in Newport, Kentucky with multiple Kentucky office locations, has discovered a HIPAA breach affecting dental patient information and is notifying affected patients by mail. The incident involved a now-terminated employee who had been sending emails from their work email account to personal, home email accounts containing protected health information from various HealthPoint dental patients.
Scope and Contents of Breach
More than 500 HealthPoint dental patients were impacted by the breach. The protected health information transferred consisted of patient names, HealthPoint ID numbers, dates of birth, gender, race, ethnicity, dental service codes, and the name of the treating HealthPoint provider. No credit card, debit card, bank account, home address, or Social Security numbers were included within the transferred information. The transferred information did not include any clinical documents or medical records.
Response and Safeguards
Upon discovering the incident, HealthPoint took steps to confirm with the former employee that all protected health information in their possession has been or is being destroyed or deleted. The employee has agreed not to retain or share any of the information and will not attempt to recreate it. The former employee’s network account, work email, and access to clinical systems and medical records had been properly disabled upon termination. HealthPoint stated that it has policies and procedures to safeguard and protect the privacy and security of patients’ health information, and all HealthPoint employees are required to complete annual training concerning patient privacy and compliance with the federal Health Insurance Portability and Accountability Act. Patients with questions or concerns may contact HealthPoint at 859-392-8015. HealthPoint is a nonprofit healthcare organization providing adult and pediatric medical, dental, mental health, substance abuse treatment, obstetrics and gynecology, and vision services with offices located in Northern and Central Kentucky accessible to the Northern Kentucky/Cincinnati and Lexington regions.
This article is an AI-assisted summary. All facts and figures are drawn from the original report: https://linknky.com/press-releases/2026/01/05/press-release-hipaa-breach/