HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 24, 2014.
- Organization as reported
- Birmingham Printing and Publishing, Inc dba Paper Airplane, AL
- Entity type as reported
- Business Associate
- Category as reported
Other
- Location of information as reported
- Other
- Submission date
- Jan. 24, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15191, row:6330)
- Archived copy
- Held in the private archive (provenance)
On September 6, 2013, the covered entity (CE), discovered that its business associate (BA) had mislabeled invitations for an event for cancer survivor patients. While the address was correct, the name on the envelope was incorrect for 1,085 individuals. The BA re-sent the invitations to the correct names and addresses with a letter explaining the mistake to the affected individuals. In response to the breach, the CE terminated its business relationship with the BA and changed to processing bulk mailings in-house. Although the CE had a policy in place before the breach that clearly outlined breach notification requirements, the CE did not perform media notification after this breach. OCR provided technical assistance on this topic. In addition, OCR obtained assurances that the CE implemented the corrective actions listed above.