HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 6, 2019.
- Organization as reported
- American Indian Health & Services, Inc., CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- May 6, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13420, row:4559)
- Archived copy
- Held in the private archive (provenance)
On March 7, 2019, American Indian Health & Services, Inc. (the covered entity), discovered that a former employee had forwarded emails to a personal email account. These emails were forwarded in a manner that conflicted with the covered entity’s policies and procedures. The breach affected approximately 3,784 individuals’ electronic protected health information (ePHI). The ePHI involved included names, social security numbers, addresses, billing information, and insurance information. In response to the breach incident, the covered entity notified the affected individuals and prominent media outlets. Following OCR’s investigation, the covered entity implemented new administrative and technical safeguards and retrained its workforce members. The covered entity also provided OCR with assurances that the former employee’s access to the covered entity’s network was terminated.