HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 22, 2012.
- Organization as reported
- L.A. Care Health Plan, CA
- Entity type as reported
- Health Plan
- Category as reported
Other
- Location of information as reported
- Paper/Films
- Submission date
- Oct. 22, 2012
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15555, row:6694)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), L.A. Care Health Plan, reported that an accidental mailing error caused member identification (ID) cards to be mailed to the wrong addresses during its annual member mailing process. The mailing error potentially affected 18,000 individuals and included names, dates of birth, addresses, and zip codes. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE edited the case numbering and address verification process for print and mail jobs with its vendor. The CE revised its policies and procedures to exclude ID cards from the annual member mailing. As a result of OCR’s investigation it provided technical assistance regarding a covered entity’s obligation to conduct an accurate and thorough risk analysis and implement security measures sufficient to reduce those risks and vulnerabilities identified in the analysis.