HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 24, 2016.
- Organization as reported
- Berkeley Endocrine Clinic, CA
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- May 24, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14519, row:5658)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE) reported to OCR that it disclosed electronic protected health information (ePHI) when it inadvertently sent a notification to 1,370 individuals without blind copying the recipients. The ePHI involved in the breach included patients' first and last names and email addresses. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE revised administrative procedures for email communications, enhanced technical measures (including encryption for desktop computers), and retrained staff. OCR’s investigation resulted in the CE enhancing its practices for safeguarding ePHI.