HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 3, 2015.
- Organization as reported
- FireKeepers Casino Hotel, MI
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 3, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14762, row:5901)
- Archived copy
- Held in the private archive (provenance)
FireKeepers Casino Hotel, the covered entity (CE), discovered that a vendor’s credentials were compromised which enabled an unauthorized individual to gain access to its computer system. This incident happened from September 7, 2014, through April 26, 2015 and affected 7,666 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, drivers’ license numbers, social security numbers, financial information, insurance information, and medical billing information. FireKeepers notified all affected individuals and the media. It terminated remote access to its computer system for vendors and strengthened its security measures for remote access. It also revised its policies and procedures regarding the privacy and security of PHI. All employees were re-trained. FireKeepers provided documentation to OCR of these corrective action steps.