HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of March 10, 2014.
- Organization as reported
- Iowa Dept. of Human Services, IA
- Entity type as reported
- Health Plan
- Category as reported
Other
- Location of information as reported
- Email, Laptop, Other Portable Electronic Device
- Submission date
- March 10, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15156, row:6295)
- Archived copy
- Held in the private archive (provenance)
Employees of the covered entity (CE), Iowa Department of Human Services, used personal email accounts, personal online storage accounts and personal electronic devices for work purposes. From February 5, 2010 to January 17, 2014, the protected health information (PHI) of 2,042 individuals was transferred outside of the CE’s secure network in this manner. The types of information included names, mailing addresses, social security numbers, state ID numbers, dates of birth, PHI obtained during case assessment, and incident information. The CE stated that it notified affected individuals and media and also offered free credit monitoring to the affected individuals. OCR has consolidated this breach with another breach involving this CE.