HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 17, 2015.
- Organization as reported
- Cancer Care Northwest, WA
- Entity type as reported
- Healthcare Provider
- Category as reported
Loss
- Location of information as reported
- Paper/Films
- Submission date
- Aug. 17, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14731, row:5870)
- Archived copy
- Held in the private archive (provenance)
A workforce member of the covered entity (CE), Cancer Care Northwest, lost a paper binder containing protected health information (PHI). The binder was likely thrown away with the garbage when it was not properly safeguarded in an otherwise secure office. Approximately 1,426 individuals were affected by this breach. The PHI included names, dates of birth, diagnoses/conditions and other treatment information. To prevent a similar breach from happening in the future, the CE instructed the work force member to only take notes electronically and retrained the workforce member on its HIPAA policies. The CE provided breach notification to HHS, affected individuals, and the media, and offered identity theft and fraud protection services to affected individuals. OCR obtained assurances that the CE implemented these corrective actions.