A London clinic has accidentally released the HIV status of hundreds of patients
On Tuesday, 56 Dean Street sent out an email to all subscribers to its Option E email service - a service intended specifically for those diagnosed with HIV. But because of the way the email was sent - recipients were included in the "To" field rather than the "Bcc" field - every subscriber to the newsletter was able to see the names and email addresses of every other subscriber.
According to Beyond Positive, a news site for people with HIV, 56 Dean Street followed this up with a second email attempting to recall it using Outlook's recall feature - revealing the email list's recipients a second time. An hour and a half later, the clinic sent a third email apologising.
"This is completely unacceptable," wrote Dr Alan McOwan. "We are urgently investigating how this has happened and I promise you that we will take steps to ensure it never happens again."
56 Dean Street is one of the country's leading sexual health clinics, and has won multiple awards, according to its website.
The Information Commissioner's Office is likely to investigate the mistake, and The Guardian reports that it can issue fines of up to £500,000 "for significant data breaches."
NHS England did not immediately respond to a request for comment from Business Insider. Chelsea and Westminster NHS Foundation Trust provided Beyond Positive with the following statement: