HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 27, 2019.
- Organization as reported
- Byham's Insurance Services Inc., PA
- Entity type as reported
- Healthcare Clearing House
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer, Email, Network Server
- Submission date
- June 27, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13352, row:4491)
- Archived copy
- Held in the private archive (provenance)
An employee of Byham’s Insurance Services, a business associate (BA), emailed protected health information (PHI) to her husband. The breach included the names, insurance coverages, insurance carriers, policy numbers, effective dates and premium amounts for 1,600 individuals. The BA provided breach notification to HHS and affected individuals. Following the breach, the BA sanctioned the involved employee and notified law enforcement. OCR provided technical assistance on how to appropriately respond to future breaches, including media notice. As a result of OCR’s investigation, the BA completed a risk assessment.