HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 8, 2015.
- Organization as reported
- Anne Arundel Health System, MD
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Oct. 8, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14695, row:5834)
- Archived copy
- Held in the private archive (provenance)
Anne Arundel Health System, the covered entity (CE), reported that it inadvertently mailed 2,208 letters containing protected health information (PHI) to the wrong recipients. The PHI involved included names, addresses, diagnoses, clinical information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In its mitigation efforts, the CE sanctioned the responsible employees, implemented additional administrative safeguards, and retrained it staff. OCR obtained assurances that the CE implemented the corrective actions noted.