HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 31, 2025.
- Organization as reported
- Fidelis Care New York, MO
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Oct. 31, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9104, row:243)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Fidelis Care New York, reported that a workforce member emailed documents containing the protected health information (PHI) of 1,680 individuals to the wrong recipient. The PHI involved included names, dates of birth, member identification numbers, medications and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative safeguards and sanctioned the responsible workforce member.