HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 20, 2020.
- Organization as reported
- Herron Business Law, PA
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Nov. 20, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12497, row:3636)
- Archived copy
- Held in the private archive (provenance)
Herron Business Law, the business associate (BA), reported that it impermissibly disclosed the electronic protected health information (ePHI) of 1,419 individuals. The ePHI involved included names and treatment information. In response to the breach, the CE provided HIPAA training to its employees and legal representatives. OCR provided the BA with technical assistance on the Breach Notification Rules and the Privacy Rule provisions pertaining to business associate agreements.