HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of April 1, 2025.
- Organization as reported
- Gardner Health Services, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- April 1, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9372, row:511)
- Archived copy
- Held in the private archive (provenance)
Gardner Health Services, the covered entity (CE) reported that an employee of its business associate (BA) mistakenly mailed letters containing the protected health information (PHI) of 26,000 individuals to incorrect recipients. The PHI involved included names and addresses. The CE notified HHS, the affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE ended its business relationship with the BA and provided technical assistance regarding the requirements of the HIPAA Breach Notification Rule.