HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 30, 2018.
- Organization as reported
- Georgia Department of Human Services, GA
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Network Server, Other Portable Electronic Device
- Submission date
- Nov. 30, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13609, row:4748)
- Archived copy
- Held in the private archive (provenance)
Georgia Department of Human Services, the business associate (BA), reported that an employee impermissibly disclosed the electronic protected health information (ePHI) of 596,065 individuals. The ePHI involved included names, birthdates, addresses, and other demographic information. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA sanctioned the responsible individuals and retrained its staff on key elements of the HIPAA Rules requiring the safeguarding of ePHI. OCR provided technical assistance to the BA on performing an accurate and thorough risk analysis. OCR obtained assurances that the BA implemented the corrective actions noted.