HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 3, 2018.
- Organization as reported
- Home for Little Wanderers, MA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- July 3, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13764, row:4903)
- Archived copy
- Held in the private archive (provenance)
On May 4, 2018, someone used the key card of a former employee to access the records room, potentially affecting 861 individuals. The type of protected health information (PHI) that was potentially exposed included demographic and clinical information. The covered entity (CE), Home for Little Wanderers, provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE deactivated the key card, closed and processed records to send to its secure record storage vendor, and updated its employee termination policy. The CE also began assessing potential improvements to improve internal security and limit employee access to records rooms. OCR obtained assurances that the CE implemented the corrective actions noted above.