HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of May 3, 2019.
- Organization as reported
- Kelsey Research Foundation, TX
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- May 3, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13426, row:4565)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Kelsey Research Foundation, reported that an employee inadvertently disclosed patients’ email addresses. This breach affected approximately 1,128 individuals. The CE provided breach notification to HHS, affected individuals, and the media. During the investigation, OCR learned that the CE sanctioned the involved workforce member involved and revised its policy and procedures to better protect sensitive data. In addition, the CE trained all workforce members on the revised policy and procedures. OCR obtained assurances that the CE implemented the corrective actions noted above.