HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 23, 2021.
- Organization as reported
- Kaiser Foundation Hospitals, Northern California, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- Feb. 23, 2021
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12338, row:3477)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Kaiser Foundation Hospitals, Northern California, reported that an employee impermissibly accessed the medical records and electronic protected health information (ePHI) of 2,121 individuals. The ePHI involved included names, dates of birth, phone numbers, email addresses, and photographs. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE also provided complimentary credit monitoring services. In response to the breach, the CE sanctioned the employee responsible for the breach. OCR provided technical assistance to the CE.