HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Jan. 20, 2017.
- Organization as reported
- Covenant Medical Center, Inc., MI
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- Jan. 20, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14295, row:5434)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Covenant Medical Center discovered that an employee accessed patients’ electronic medical records from February 1, 2016 through November 21, 2016 without an appropriate business purpose. This breach affected the clinical, demographic, and financial information of approximately 6,197 individuals. The CE provided breach notification to HHS, affected individuals, and the media. It also offered affected individuals credit monitoring. Following the breach, the CE sanctioned the involved employee and retrained staff. OCR obtained assurances that the CE implemented the corrective actions listed above. In this case the sanctions included termination of employment.