HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 3, 2018.
- Organization as reported
- Kaiser Foundation Health Plan of Colorado, CO
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Aug. 3, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13731, row:4870)
- Archived copy
- Held in the private archive (provenance)
On June 5, 2018, Kaiser Foundation Health Plan of Colorado, the covered entity (CE), discovered that due to an employee error in performing a mail merge, approximately 900 members’ names were mismatched with other members' addresses. The types of protected health information (PHI) involved in the incident included members' names and the names of their former primary care physicians. The CE provided breach notification to affected individuals, the media, and HHS. Following the breach, the CE revised its mailing processes. OCR obtained assurances that the CE implemented the voluntary corrective actions listed above. The employee responsible for the breach is no longer employed with the CE.