HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 30, 2018.
- Organization as reported
- Dino-Peds, CO
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- May 30, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13801, row:4940)
- Archived copy
- Held in the private archive (provenance)
On May 30, 2018, Dino-Peds, the covered entity (CE), reported that one of its former providers disclosed his patients protected health information (PHI) to the hospital where the provider was moving his services and the hospital used this information to send a patient notification about the provider's move. The PHI included the names and addresses of 1,357 individuals. The provider had proper access to the information when he pulled it from his records, but the CE was unaware that the provider would be instructing the hospital to send a mailing. The CE notified the affected individuals on June 1, 2018. OCR provided the CE with technical assistance regarding the CE’s obligations to safeguard PHI and to ensure it has met its Breach Notification Rule obligations.