HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 12, 2016.
- Organization as reported
- Codman Square Health Center, MA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer
- Submission date
- Sept. 12, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14425, row:5564)
- Archived copy
- Held in the private archive (provenance)
A workforce member provided an unauthorized individual with the workforce member’s credentials so as to allow the individual access to the New England Health Exchange Network (NEHEN) via computer. The unauthorized individual was thus able to access the protected health information (PHI) of 102 patients of the covered entity (CE), Codman Square Health Center. The types of PHI involved in the breach included patients’ names, addresses, birthdates, medical insurance information, and for patients receiving Medicaid, social security numbers. The CE provided breach notification to the affected individuals, the media and HHS. The CE also provided individuals fraud resolution and credit monitoring services at no cost. Following discovery of the breach, the CE sanctioned the involved employees and re-trained all employees. As a result of OCR’s investigation, the CE revised its Breach Notification policy and implemented related procedures.