HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 26, 2017.
- Organization as reported
- Henry Ford Health System, MI
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- June 26, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14150, row:5289)
- Archived copy
- Held in the private archive (provenance)
On May 18, 2017, the Troy, Michigan police informed the covered entity (CE) that possible Henry Ford Health System protected health information (PHI) in paper form was found in a storage unit of a suspected identify thief. The documents were old patient face sheets for 596 individuals that included patients’ demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE obtained all 596 patients face sheets from the police and implemented an active access monitoring tool on its information system that stores the patient face sheets. OCR obtained documented assurances that the CE implemented the corrective actions noted above.