HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 19, 2019.
- Organization as reported
- Henry Ford Health System, MI
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- June 19, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13362, row:4501)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Henry Ford Health System (HFHS), reported that an employee inadvertently sent an email containing protected health information (PHI) to an incorrect email address. This breach affected 1,404 individuals. The PHI involved included names, dates of birth, medical conditions, and lab results. HFHS notified HHS, affected individuals, and the media. HFHS also retrained its employees on the importance of checking email addresses before sending emails. The CE implemented additional administrative and technical safeguards to further protect its PHI. OCR obtained assurances that the CE implemented the corrective actions noted above.