HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Dec. 14, 2017.
- Organization as reported
- Kaiser Foundation Health Plan, Inc., CA
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Dec. 14, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13972, row:5111)
- Archived copy
- Held in the private archive (provenance)
On December 14, 2017, the covered entity (CE) reported that on November 2, 2017, a physician’s Outlook email account was accessed by unknown parties that used the physician's compromised login credentials. The breach potentially affected the protected health information (PHI) of approximately 4,389 individuals, including demographic, clinical, and health claims/account information. The CE provided breach notification to HHS, affected individuals, and the media, and posted substitute notice on its website. The CE revised its policies and procedures specific to the allegations of the breach. OCR provided substantial technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted above.