HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 8, 2019.
- Organization as reported
- Bloodworks Northwest, WA
- Entity type as reported
- Healthcare Provider
- Category as reported
Loss
- Location of information as reported
- Paper/Films
- Submission date
- May 8, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13415, row:4554)
- Archived copy
- Held in the private archive (provenance)
An employee of the covered entity (CE), Bloodworks Northwest, printed a report containing the protected health information (PHI) of 1,893 patients and left it on a desk overnight. When the employee returned the next morning, the printed report, which contained patients’ demographic and clinical information, was missing. The CE investigated the incident and improved safeguards by storing patient files in locked cabinets, updating its process for internal sharing of PHI, and enhancing its security rounds. The CE provided breach notification to HHS, affected individuals and the media and also posted notice on its website. OCR obtained assurances that the CE implemented the corrective actions noted above.