HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Jan. 3, 2014.
- Organization as reported
- Coulee Medical Center, WA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Email, Laptop, Network Server
- Submission date
- Jan. 3, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15217, row:6356)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Coulee Medical Center, reported that a CE-employed physician disclosed electronic protected health information (ePHI) to his wife without authorization. The ePHI involved in the breach included names, hospital account numbers, dates of service, CPT codes, and service descriptions for approximately 2,500 individuals. The CE provided breach notification to HHS and affected individuals. Upon discovering the breach, the CE sanctioned the physician, required the physician to complete comprehensive HIPAA training, and required all workforce members to complete annual HIPAA training. As a result of OCR's investigation, the CE implemented new information security policies and procedures to better safeguard its ePHI. OCR provided the CE with technical assistance regarding what constitutes an adequate Security Rule risk analysis and risk management plan, as well as what constitutes adequate notice to the media pursuant to the Breach Notification Rule. \ \