HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 5, 2024.
- Organization as reported
- Butler Health Plan, SW Division of OHI, OH
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 5, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9813, row:952)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Butler Health Plan, SW Division of OHI, reported that its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of approximately 5,911 individuals. The PHI involved names, dates of birth, and addresses. The CE notified HHS; the BA notified the affected individuals and the media. In response to the breach the BA implemented additional administrative, technical, and security safeguards. OCR provided technical assistance to the CE regarding the HIPAA Rules.